Beveiligingsadvies

CVE-2026-7412

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-05 14:15:05

Laatst bijgewerkt 2026-05-06 15:25:44

Toegewezen door eclipse

CVSS-score 8.6

Status PUBLISHED

Beschrijving

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to arbitrary internal or external targets. This allows an attacker to bypass network segmentation and pivot into isolated internal IT/OT infrastructure or target Cloud Metadata services (IMDS).

← Alle CVE's bekijken Bekijk op cve.org ↗