Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/05/16 1:56 a.m.•35 views

CVE-2026-45248

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing authentication credentials to obtain...

6.9CVSS5.8AI score0.00434EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/15 12:30 a.m.•46 views

EUVD-2026-30494

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing authentication credentials to obtain...

6.9CVSS5.8AI score0.00434EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/14 9:36 p.m.•13 views

CVE-2026-45248 Hedera Guardian Authentication Bypass Information Disclosure

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing authentication credentials to obtain...

6.9CVSS5.8AI score0.00434EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/14 9:36 p.m.•72 views

CVE-2026-45248 Hedera Guardian Authentication Bypass Information Disclosure

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing authentication credentials to obtain...

6.9CVSS0.00434EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/14 9:36 p.m.•194 views

CVE-2026-45248

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in GET /api/v1/demo/registered-users that allows unauthenticated attackers to retrieve usernames, Hedera DIDs, parent registry DIDs, system roles, and policy role assignments for all registered users. Exploitation detai...

6.9CVSS5.8AI score0.00434EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•1 views

CVE-2026-45248: Missing Authentication for Critical Function

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing authentication credentials to obtain...

6.9CVSS5.8AI score0.00434EPSS
SaveExploits0References4
Rows per page
Query Builder