Threats Tagged 'cve-2026-81098'
View all threats tagged with 'cve-2026-81098'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-81098'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-81098: Missing Authentication for Critical Function in team-telnyx telnyx-mcpCVE-2026-81098 0 The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they were absent, so a request without any credential completed initialisation and dispatched tools. Dispatch forwarded the server's own stored credentials, the Telnyx API key and client secret together with the code-execution key, to the upstream endpoint, so an unauthenticated caller able to reach the port acted with them. The current code defaults the host to loopback, requires a server API key, and enforces it in middleware. Join the discussion | CVE Database V5 | 08/27/2026, 14:50:38 UTC Added: 08/27/2026, 16:54:10 UTC |
Showing 1 to 1 of 1 result