Beveiligingsadvies

CVE-2026-92729

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 18:31:19

Laatst bijgewerkt 2026-09-16 18:31:19

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and error activity without credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗