Beveiligingsadvies

CVE-2026-82279

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 16:18:59

Laatst bijgewerkt 2026-08-28 20:25:37

Toegewezen door VulnCheck

CVSS-score 8.1

Status PUBLISHED

Beschrijving

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH /team/name, and DELETE /team/member endpoints.

← Alle CVE's bekijken Bekijk op cve.org ↗