2 matches found
CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...
5.4CVSS0.00152EPSS
SaveExploits0References2
EUVD-2026-92711
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...
5.4CVSS5.9AI score0.00152EPSS
SaveExploits0References2
20