Threats Tagged 'cve-2026-82426'
View all threats tagged with 'cve-2026-82426'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-82426'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-82426 is a path traversal vulnerability in Apache Storm Nimbus versions 3.0.0 up to but not including 3.1.0. It allows an authenticated user with topology submission rights to submit arbitrary files readable by the Nimbus daemon as their topology jar, bypassing intended upload controls. This can expose sensitive files such as the Nimbus Kerberos keytab, TLS private keys, and ZooKeeper credentials. The vulnerability arises because Nimbus does not verify that the submitted file path is within the designated upload directory. The issue is fixed in version 3.1.0 by enforcing canonicalization and restricting paths to the Nimbus inbox. Mitigations include upgrading to 3.1.0 or restricting submission rights and rotating exposed credentials. Join the discussion | CVE Database V5 | 09/14/2026, 14:04:16 UTC Added: 09/14/2026, 14:32:16 UTC |
Showing 1 to 1 of 1 result