CVE-2026-108142
NoneCVSS
—
EPSS
0.4%
Published
Oct 27, 2026
CISA due date
—
The record
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-110985 A Kafka broker using SASL/OAUTHBEARER with the default validator… CWE-636
- CVE-2026-105933 Apache Pulsar allows an administrator to require end-to-end message encryption for all… CWE-636
- CVE-2026-74048 Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. CWE-636
- CVE-2026-88831 BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed… CWE-636
- CVE-2026-81379 Not failing securely ('failing open') in Visual Studio Code allows an unauthorized… CWE-636
- CVE-2026-85649 (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password… CWE-636
- CVE-2026-18329 Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a… CWE-636
- CVE-2026-82744 Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor… CWE-636