CVE-2026-31309

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92579 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92579 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92579...

CVE-2026-31309

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request...

CVE-2026-31309

Mysterium Node versions from v1.21.1-rc0 before v1.36.0 are vulnerable to improper authorization in the /tequilapi/config/user endpoint. An unauthenticated attacker can exploit this by sending a crafted POST request to arbitrarily overwrite the node's configuration, potentially leading to a full ...