Beveiligingsadvies

CVE-2026-18638

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-11 15:00:53
Laatst bijgewerkt 2026-08-11 17:22:44
Toegewezen door rapid7
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.