Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-112000

Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs

Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to Subscribe to hijack it, read and acknowledge its events, starve the legitimate consumer, and enumerate cluster users via ListUser.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Vanus-labs
Products
Vanus
CVE-2026-111999

Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/{ns}/eventbus/{name}/events or legacy /gateway/{name} paths, bypassing token authentication and authPublish checks, so they are stored and delivered to subscription sinks.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Vanus-labs
Products
Vanus
CVE-2026-111998

Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users, tokens, and role bindings, and read or publish events.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Vanus-labs
Products
Vanus