Threats tagged 'ghsa-92qj-9p68-wfhf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-89017Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to High8.72026-11-06GCVE DatabaseCVE-2026-89017 Skyline DataMiner BrokerGateway has a vulnerability where an embedded API key can be retrieved by unauthenticated attackers even when pairing mode is disabled. This key allows attackers to access the DataMinerUser.creds NATS credential and gain trusted message-bus access via TCP port 4222 without prior credentials. The issue is fixed in several cumulative updates of DataMiner versions 10.6.9, 10.6.0, 10.5.0, and 10.4.0. Report on CVE-2026-89017 Vulnerability CWE-306 #ghsa-92qj-9p68-wfhf	GCVE Database	2026-11-06

Page 1 of 1