Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...

CVE-2026-53469

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

CVE-2026-53469

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

CVE-2026-53469 Migration-planner: unprotected delete endpoint wipes all tenant data

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

CVE-2026-53469 Migration-planner: unprotected delete endpoint wipes all tenant data

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

CVE-2026-53469

Migration-planner is affected. An authenticated user can issue a DELETE to /api/v1/sources that is not properly authorized/filtered, permitting destruction of all tenant data (sources, agents, assessments) and causing critical loss of availability and integrity across the SaaS platform. Affected ...

CVE-2026-53469 Migration-planner: unprotected delete endpoint wipes all tenant data

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

CVE-2026-53469

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

EUVD-2026-36028

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...

GHSA-P58X-R3C9-X9P6

creationtimestamp| type| source ---|---|--- 2026-06-10 11:30:53+00:00| seen| https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mnwmdrqrxc2q 2026-06-10 12:04:33+00:00| seen| https://bsky.app/profile/betterhn20.e-work.xyz/post/3mnwo7xvt7d2u 2026-06-11 01:43:14+00:00| seen|...

CVE-2026-52884

creationtimestamp| type| source ---|---|--- 2026-06-10 11:18:20+00:00| seen| https://bsky.app/profile/hn100.bsky.social/post/3mnwlmv624n2n 2026-06-10 11:19:33+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3mnwlpjjr3e22 2026-06-10 11:20:05+00:00| seen|...

CVE-2026-9067

creationtimestamp| type| source ---|---|--- 2026-06-10 11:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkswfh3g2u 2026-06-10 12:00:19+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnwnygdhh62q 2026-06-10 12:00:40+00:00| seen|...

CVE-2025-6254

creationtimestamp| type| source ---|---|--- 2026-06-10 11:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwkntijit26 2026-06-10 11:11:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwlbd3rzn2c 2026-06-10 12:00:15+00:00| seen|...

CVE-2026-3326

creationtimestamp| type| source ---|---|--- 2026-06-10 10:51:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwk66y52s2r 2026-06-10 12:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwnylckjr2p...

CVE-2026-53435

creationtimestamp| type| source ---|---|--- 2026-06-10 07:43:47+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-jenkins-1 2026-06-12 21:00:04+00:00| published-proof-of-concept| Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY 2026-06-15 12:35:16+00:00| seen|...

CVE-2026-11837

creationtimestamp| type| source ---|---|--- 2026-06-10 06:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnvzvhfhhz25 2026-06-10 06:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116724284473192022 2026-06-10 08:41:51+00:00| seen|...

CVE-2026-46545

creationtimestamp| type| source ---|---|--- 2026-06-10 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj4ygjef27 2026-06-10 01:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvklx2hb426...

CVE-2026-53673

creationtimestamp| type| source ---|---|--- 2026-06-10 01:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj4j6dmr2v 2026-06-10 01:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvl5ug2g62m...

CVE-2026-46541

creationtimestamp| type| source ---|---|--- 2026-06-10 00:57:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvixulqad2u 2026-06-10 01:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj4qr44h26...