77 matches found
CVE-2026-82265
A flaw was found in Zipkin. Unauthenticated attackers can exploit exposed Spring Boot Actuator endpoints on the tracing API port to access sensitive information. This allows them to read environment variables, bean configurations, and storage credentials. Additionally, attackers can modify log...
CVE-2026-82265
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information. Attackers can read environment variables, bean configurations, and storage credentials via actuator endpoints, or modify...
CVE-2026-82265 Zipkin Unauthenticated Spring Boot Actuator Endpoints Exposure
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information. Attackers can read environment variables, bean configurations, and storage credentials via actuator endpoints, or modify...
EUVD-2026-67796
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information. Attackers can read environment variables, bean configurations, and storage credentials via actuator endpoints, or modify...
CVE-2026-82265 Zipkin Unauthenticated Spring Boot Actuator Endpoints Exposure
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on the tracing API port without authentication, allowing unauthenticated attackers to access sensitive information. Attackers can read environment variables, bean configurations, and storage credentials via actuator endpoints, or modify...
CVE-2026-82265
Zipkin through 3.6.1 exposes Spring Boot Actuator endpoints on its tracing API port without authentication. This allows unauthenticated attackers to read environment variables , bean configurations , and storage credentials , or to modify log levels to suppress logging. The vulnerability is netwo...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
GHSA-QX7J-JV8M-FPPR vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, zipkin...
GHSA-68MJ-5WR7-6FGG vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
GHSA-93J5-89VC-PPH4 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, zipkin...
CVE-2026-63336 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
GHSA-6G32-PXV4-2WFJ vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
CVE-2026-69219 vulnerabilities
Vulnerabilities for packages: conductor, thingsboard, cassandra-reaper, conductor-fips, druid, logstash, nuxeo, logstash-fips, traccar, zipkin, traccar-fips...
