CVE-2026-5025 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require ba…
Medium CVSS: 6.5

CVE-2026-5025

The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser').
Vendor
-
Product
-
CWE
CWE-862
Yayın Tarihi
2026-03-27 15:17:04
Güncelleme
2026-03-30 13:26:29
Source Identifier
vulnreport@tenable.com
KEV Date Added
-

Kategoriler

Referanslar