Security Advisory

CVE-2026-79666

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-25 11:33:28

Last updated 2026-08-25 11:33:28

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data including file paths, stack traces, and internal URLs.

← Browse all CVEs View on cve.org ↗