Beveiligingsadvies

CVE-2026-18678

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-12 18:49:45

Laatst bijgewerkt 2026-08-13 14:47:36

Toegewezen door Kong

CVSS-score 5.5

Status PUBLISHED

Beschrijving

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection. An attacker on the network path between the operator and the control plane can intercept user or admin API tokens and then act against the control plane as that user.

← Alle CVE's bekijken Bekijk op cve.org ↗