Beveiligingsadvies

CVE-2026-82641

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 13:23:40

Laatst bijgewerkt 2026-09-02 18:13:51

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt recorded TLS traffic, or invoke /agent/stop and /agent/storemocks to manipulate recording sessions.

← Alle CVE's bekijken Bekijk op cve.org ↗