152 matches found
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
hermes-sidecar-poc
Hermes PoC — Pod + Nacos + Math microservice Dubbo Triple S...
GHSA-R29C-68GH-XP6X vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
CVE-2026-41293 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
CVE-2026-41284 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
GHSA-FV25-8XCX-GQJC vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
CVE-2026-43513 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
CVE-2026-43512 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
GHSA-GX5V-XP9W-J4CG vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
GHSA-5MP6-JRQ3-R938 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
CVE-2026-42498 vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
GHSA-H6FC-48RJ-7QQH vulnerabilities
Vulnerabilities for packages: ontop, thingsboard, kayenta-fips, ontop-fips, kayenta, nacos-docker, nacos, camunda, camunda-zeebe...
com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (=2021.0.1.0), com.bpfaas:bps-config-server-novault-spring-cloud-starter (=3.2.2) +9 more potentially affected by CVE-2026-41002 via org.springframework.cloud:spring-cloud-config-server (>=3.1.0 <=3.1.10)
org.springframework.cloud:spring-cloud-config-server MAVEN version =3.1.0, =2.1.4, =0.1, =6.5.0, =6.5.0, =2.0.1, =3.1.0, =2.1.0, =2.1.1 Source cves: CVE-2026-41002 Source advisory: OSV:GHSA-86WQ-234Q-R6WG...
GHSA-98QH-XJC8-98PQ vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, sonarqube, kayenta, flyway-fips, camunda, camunda-zeebe, debezium, dependency-track, nuxeo, hono, flyway, keycloak, ghidra, geoserver, nacos, apicurio-registry, keycloak-fips, dependency-track-apiserver, kayenta-fips, seata, nacos-docker,...
CVE-2026-42198 vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, sonarqube, kayenta, flyway-fips, camunda, camunda-zeebe, debezium, dependency-track, nuxeo, hono, flyway, keycloak, ghidra, geoserver, nacos, apicurio-registry, keycloak-fips, dependency-track-apiserver, kayenta-fips, seata, nacos-docker,...
cc.chensoul.nacos:nacos-distribution (=2.5.2), cn.sparrowmini:sparrow-org-service (=0.0.1) +625 more potentially affected by CVE-2026-22746 via org.springframework.security:spring-security-core (>=5.8.0 <=5.8.2)
org.springframework.security:spring-security-core MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.12.0, =5.12.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =2.6.0 and more Source cves: CVE-2026-22746 Source advisory: OSV:GHSA-VXF7-QJ7Q-83FH...
GHSA-HV2W-8MJJ-JW22 vulnerabilities
Vulnerabilities for packages: nacos-docker, camunda, camunda-zeebe, nacos...