Beveiligingsadvies

CVE-2026-5374

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 14:10:36

Laatst bijgewerkt 2026-04-07 14:50:26

Toegewezen door runZero

CVSS-score 5.8

Status PUBLISHED

Beschrijving

An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved. This is an instance of CWE-863: Incorrect Authorization, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N (5.8 Medium). This issue was fixed in version 4.0.260202.0 of the runZero Platform.

← Alle CVE's bekijken Bekijk op cve.org ↗