CVE-2026-111684

Magistrala, versions through 1.0.0 , contains a cross-tenant authorization bypass within its Certs Service . The vulnerability allows authenticated workspace members to access and manipulate certificates belonging to other tenants by providing foreign serials or entity IDs. Specifically, an attac...

EUVD-2026-102975

Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or...

PT-2026-116083

Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or...