CVE-2026-123033

Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 and in release trains before their respective fixes allows an attacker on the same network segment to achieve unauthenticated full-administrator API access and execute commands as root. middlewar...