Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•9 views

CVE-2026-87108: Authorization Bypass Through User-Controlled Key

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration...

4.3CVSS5.8AI score0.00141EPSS
SaveExploits0References3
Rows per page
Query Builder