Threats Tagged 'cve-2026-46711'
View all threats tagged with 'cve-2026-46711'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-46711'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-46711 is a high-severity vulnerability in Soft Machine's workspace HTTP service versions 0.2.247 and earlier. The service listens on all interfaces (0.0.0.0:8080) and exposes several endpoints without any authentication or origin verification. This allows any host with network access to the workspace's TCP port 8080 to read arbitrary files and download entire project directories. Additionally, because all workspaces share a private network and resolve peer addresses via an unauthenticated internal DNS record, any other workspace within the same Fly app or organization can act as an unauthenticated attacker. This effectively breaks the trust boundary between workspace owners and other users. No patches are publicly known at the time of publication. Join the discussion | CVE Database V5 | 09/30/2026, 16:30:02 UTC Added: 09/30/2026, 16:49:14 UTC |
Showing 1 to 1 of 1 result