CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216

Apache SkyWalking (versions 9.6.0 through 11.0.0 ) has a vulnerability in its PagerDuty alarm hook , which transmits the integration routing key over cleartext HTTP . Although PagerDuty normally redirects plain HTTP requests to HTTPS, the initial POST — including the JSON body containing the rout...