CVE-2026-71468

A flaw was found in acm-search-v2-api-rhel9. When the getFederationConfig function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub...

PT-2026-70868

Name of the Vulnerable Software and Affected Versions acm-search-v2-api-rhel9 affected versions not specified Description A flaw exists where the getFederationConfig function improperly reuses a user's bearer token for all subsequent federated requests during cache refreshes until the cache...