Beveiligingsadvies

CVE-2026-92566

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 14:40:46

Laatst bijgewerkt 2026-09-16 15:40:13

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP requests by supplying a caller-controlled URI. Attackers can issue GET, POST, PUT, PATCH, or DELETE requests to internal endpoints and cloud metadata services, receiving full response bodies without authentication or validation.

← Alle CVE's bekijken Bekijk op cve.org ↗