CVE-2026-47768

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-47768", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-19T22:36:16.882Z", "datePublished": "2026-07-28T18:19:39.559Z", "dateUpdated": "2026-07-28T18:47:53.458Z"}, "containers": {"cna": {"title": "nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)", "problemTypes": [{"descriptions": [{"cweId": "CWE-598", "lang": "en", "description": "CWE-598: Use of GET Request Method With Sensitive Query Strings", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc"}, {"name": "https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2"}], "affected": [{"vendor": "juev", "product": "nebula-mesh", "versions": [{"version": "< 0.3.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-28T18:19:39.559Z"}, "descriptions": [{"lang": "en", "value": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version 0.3.2."}], "source": {"advisory": "GHSA-9pg3-25fq-p6cc", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-28T18:47:43.815226Z", "id": "CVE-2026-47768", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T18:47:53.458Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-47768", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-28T18:47:43.815226Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-28T18:47:49.136Z"}}], "cna": {"title": "nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)", "source": {"advisory": "GHSA-9pg3-25fq-p6cc", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "juev", "product": "nebula-mesh", "versions": [{"status": "affected", "version": "< 0.3.2"}]}], "references": [{"url": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc", "name": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2", "name": "https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version 0.3.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-598", "description": "CWE-598: Use of GET Request Method With Sensitive Query Strings"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-28T18:19:39.559Z"}}}, "cveMetadata": {"cveId": "CVE-2026-47768", "state": "PUBLISHED", "dateUpdated": "2026-07-28T18:47:53.458Z", "dateReserved": "2026-05-19T22:36:16.882Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-28T18:19:39.559Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "nebula-mesh", "vendor": "juev", "versions": [{"status": "affected", "version": "< 0.3.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version 0.3.2."}, {"lang": "es", "value": "nebula-mesh es un plano de control autoalojado para la red privada virtual de malla Slack Nebula. Antes de la versi\u00f3n 0.3.2, la clave API de operador reci\u00e9n generada quedaba expuesta en la URL de redirecci\u00f3n (Referer, historial, registros de proxy). Este problema ha sido parcheado en la versi\u00f3n 0.3.2."}], "id": "CVE-2026-47768", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47768", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-28T18:47:43.815226Z", "version": "2.0.3"}}]}, "published": "2026-07-28T19:17:34.567", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/forgekeep/nebula-mesh/releases/tag/v0.3.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-9pg3-25fq-p6cc"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-598"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.3.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "nebula-mesh", "source": "cna", "vendor": "juev"}, "product": "nebula-mesh", "vendor": "juev"}], "created": "2026-07-28T19:30:16.646643+00:00", "updated": "2026-08-03T14:45:04.279788+00:00", "vendors": ["juev", "juev$PRODUCT$nebula-mesh"]}