Beveiligingsadvies

CVE-2026-41132

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-13 18:53:28
Laatst bijgewerkt 2026-05-14 15:42:18
Toegewezen door GitHub_M
CVSS-score 6.6
Status PUBLISHED

Beschrijving

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.10 and 2.11.5, the configured SMTP server may be spoofed with any certificate (e.g. self-signed), leaving credentials and all emails sent open to MITM attacks. This vulnerability is fixed in 2.10.10 and 2.11.5.