CVE-2026-40050

creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:24+00:00| seen| Telegram/IV3XUTumqBvhxDGxYKmJv890gnK1hu13PgwZ6nuJXKkSo 2026-04-21 19:25:31+00:00| published-proof-of-concept| Telegram/ul8xPPBt1TpPWUc6F08s489cG5Kpdb6-6jXrljeUyK6zBrY 2026-04-22 10:03:50+00:00| seen|...

CVE-2026-40050

CVE-2026-40050 describes a critical unauthenticated path traversal in CrowdStrike LogScale. The vulnerability exists in a specific cluster API endpoint that, if exposed, allows a remote attacker to read arbitrary files from the server filesystem without authentication. This affects LogScale self-...