Lucene search
+L

8 matches found

CERT
CERT
•added 2026/04/23 12:00 a.m.•23 views

Unauthenticated configuration modification vulnerability in Central Office Services - Content Hosting Component

Overview A security flaw exists in the configuration management endpoint of the DRC INSIGHT software, allowing an unauthenticated user with access to the same network as the server to modify the server’s configuration file. This could enable data exfiltration, traffic redirection, or service...

7.5CVSS5.7AI score0.0036EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/16 1:22 p.m.•14 views

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•15 views

EUVD-2026-22679

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

5.8AI score0.0036EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/14 6:17 p.m.•15 views

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

7.5CVSS0.0036EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/14 5:51 p.m.•32 views

CVE-2026-5756

The DRC INSIGHT platform's Central Office Services (COS) component contains an unauthenticated configuration file modification vulnerability. The issue stems from a unified API router that fails to separate public content functions from administrative functions, specifically exposing the /v0/conf...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/14 5:51 p.m.•6 views

CVE-2026-5756

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

5.8AI score0.0036EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-5756: Undefined Security Weakness

Unauthenticated Configuration File Modification Vulnerability in DRC Central Office Services COS allows an attacker to modify the server's configuration file, potentially leading to mass data exfiltration, malicious traffic interception, or disruption of testing services...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•22 views

PT-2026-32896

Name of the Vulnerable Software and Affected Versions DRC Central Office Services COS affected versions not specified Description An unauthenticated configuration file modification issue allows an attacker to modify the server configuration file. This could lead to mass data exfiltration, malicio...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References5
Rows per page
Query Builder