Beveiligingsadvies

CVE-2026-64623

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 12:04:55

Laatst bijgewerkt 2026-08-14 16:50:36

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as valid. Unauthenticated attackers can submit forged APS delegation payloads with arbitrary scopes to bypass signature verification and obtain signed permission-grant tokens for sensitive resources including SHELL_EXEC.

← Alle CVE's bekijken Bekijk op cve.org ↗