138 matches found
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, keycloak, apache-nifi, ontop, dependency-track-apiserver, request-9047-keycloak-fips, nacos, infinispan, apicurio-registry, nacos-docker, airbyte-server, dependency-track, zipkin, keycloak-fips, camunda-zeebe, kafka-bridge-fips,...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, keycloak, apache-nifi, ontop, dependency-track-apiserver, request-9047-keycloak-fips, nacos, infinispan, apicurio-registry, nacos-docker, airbyte-server, dependency-track, zipkin, keycloak-fips, camunda-zeebe, kafka-bridge-fips,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, keycloak, apache-nifi, request-9047-keycloak-fips, dependency-track-apiserver, nacos, infinispan, apicurio-registry, nacos-docker, airbyte-server, dependency-track, zipkin, keycloak-fips, camunda-zeebe, apicurio-registry-fips...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, keycloak, apache-nifi, request-9047-keycloak-fips, dependency-track-apiserver, nacos, infinispan, apicurio-registry, nacos-docker, airbyte-server, dependency-track, zipkin, keycloak-fips, camunda-zeebe, apicurio-registry-fips...
hermes-sidecar-poc
Hermes PoC — Pod + Nacos + Math microservice Dubbo Triple S...
GHSA-FV25-8XCX-GQJC vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
GHSA-GX5V-XP9W-J4CG vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
GHSA-5MP6-JRQ3-R938 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-41293 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-41284 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-43512 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-42498 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
GHSA-R29C-68GH-XP6X vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-43513 vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
GHSA-H6FC-48RJ-7QQH vulnerabilities
Vulnerabilities for packages: camunda, kayenta-fips, ontop, nacos, kayenta, nacos-docker, thingsboard, camunda-zeebe, ontop-fips...
CVE-2026-42198 vulnerabilities
Vulnerabilities for packages: keycloak, kayenta, sonarqube, apache-hop, dependency-track-apiserver, nuxeo, geoserver, thingsboard, guacamole-client, debezium, flyway, nacos-docker, hono, keycloak-fips, flyway-fips, apache-hop-fips, ghidra, camunda, kayenta-fips, nacos, apicurio-registry, seata,...
GHSA-98QH-XJC8-98PQ vulnerabilities
Vulnerabilities for packages: keycloak, kayenta, sonarqube, apache-hop, dependency-track-apiserver, nuxeo, geoserver, thingsboard, guacamole-client, debezium, flyway, nacos-docker, hono, keycloak-fips, flyway-fips, apache-hop-fips, ghidra, camunda, kayenta-fips, nacos, apicurio-registry, seata,...