Lucene search
+L

4 matches found

NVD
NVD
added 2026/07/20 12:19 p.m.13 views

CVE-2026-64622

Network-AI npm: network-ai versions 5.12.2 through 5.13.3 fail to apply the configured authorization check checkAuth/secret to the ApprovalInbox GET read routes, so even when an operator configures a secret, unauthenticated actors can access sensitive approval request details. The GET...

9.3CVSS0.00408EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/20 12:4 p.m.28 views

EUVD-2026-45937

Network-AI npm: network-ai versions 5.12.2 through 5.13.3 fail to apply the configured authorization check checkAuth/secret to the ApprovalInbox GET read routes, so even when an operator configures a secret, unauthenticated actors can access sensitive approval request details. The GET...

9.3CVSS5.3AI score0.00408EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 12:4 p.m.5 views

CVE-2026-64622

Network-AI npm: network-ai versions 5.12.2 through 5.13.3 fail to apply the configured authorization check checkAuth/secret to the ApprovalInbox GET read routes, so even when an operator configures a secret, unauthenticated actors can access sensitive approval request details. The GET...

9.3CVSS5.3AI score0.00408EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/20 12:4 p.m.35 views

CVE-2026-64622 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox

Network-AI npm: network-ai versions 5.12.2 through 5.13.3 fail to apply the configured authorization check checkAuth/secret to the ApprovalInbox GET read routes, so even when an operator configures a secret, unauthenticated actors can access sensitive approval request details. The GET...

9.3CVSS0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder