Threats tagged 'ghsa-h882-2qpw-598h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-123270redpanda-connect-unauth-rce · Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables Critical9.82026-11-09GCVE DatabaseCVE-2026-123270 Redpanda Connect versions 4.39 through 4.110 have a missing authentication vulnerability in the management HTTP API exposed on 0.0.0.0:4195. This allows unauthenticated remote code execution (RCE) by posting malicious pipeline definitions containing code-executing processors. Starting with version 4.111, the API endpoint is disabled by default but can be enabled manually, retaining the RCE risk if enabled. Report on CVE-2026-123270 Vulnerability CWE-306 #ghsa-h882-2qpw-598h	GCVE Database	2026-11-09

Page 1 of 1