Beveiligingsadvies

CVE-2026-86543

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-07 23:03:20

Laatst bijgewerkt 2026-09-07 23:03:20

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicly accessible address.

← Alle CVE's bekijken Bekijk op cve.org ↗