Beveiligingsadvies

CVE-2026-3431

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-02 13:00:58

Laatst bijgewerkt 2026-03-02 13:33:23

Toegewezen door tenable

CVSS-score 9.8

Status PUBLISHED

Beschrijving

On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions. An attacker can leverage these endpoints to connect to any reachable MongoDB instance and perform unauthorized operations including reading, modifying, and deleting data.

← Alle CVE's bekijken Bekijk op cve.org ↗