CVE-2026-107795
2026-10-14
23h17 +00:00
23h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privileged certificate management operations.
Successful exploitation may allow a low-privileged authenticated user to upload or delete the controller's TLS certificate or private key, potentially disrupting secure management access.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Access Control The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
||
| Missing Authorization The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
