Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-103057 (GCVE-0-2026-103057)

Vulnerability from nvd – Published: 2026-09-30 00:19 – Updated: 2026-09-30 13:56

Title

AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

Summary

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 13:56 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/2f0e954f2…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-5.1.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 5.1.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103057",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T13:56:33.984674Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T13:56:57.220Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mqjp-pcpr-7c37"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:12.549Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-mqjp-pcpr-7c37)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mqjp-pcpr-7c37"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/index.ts#L681-L691"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-5.1.0-before-12.0.0-missing-authentication-on-realtime-service-internal-endpoints"
        }
      ],
      "title": "AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103057",
    "datePublished": "2026-09-30T00:19:12.549Z",
    "dateReserved": "2026-09-29T23:34:44.573Z",
    "dateUpdated": "2026-09-30T13:56:57.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103056 (GCVE-0-2026-103056)

Vulnerability from nvd – Published: 2026-09-30 00:19 – Updated: 2026-09-30 18:09

Title

AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

Summary

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated users can inject single quotes into file_path, path, script_name, or script_args parameters to break out of quoted arguments and execute arbitrary commands on managed endpoints with SYSTEM or root privileges.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 18:02 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

VulnCheck mitre root Scorecard

References

6 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/dac397234…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-7.2.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 7.2.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103056",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T18:02:45.621861Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:32.342Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated users can inject single quotes into file_path, path, script_name, or script_args parameters to break out of quoted arguments and execute arbitrary commands on managed endpoints with SYSTEM or root privileges."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:11.887Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-7q37-2wfw-xrx7)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/clients/crowdstrike_rtr.py#L273"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/executors/endpoint.py#L442"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-7.2.0-before-12.0.0-command-injection-via-crowdstrike-rtr"
        }
      ],
      "title": "AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103056",
    "datePublished": "2026-09-30T00:19:11.887Z",
    "dateReserved": "2026-09-29T23:34:44.223Z",
    "dateUpdated": "2026-09-30T18:09:32.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103055 (GCVE-0-2026-103055)

Vulnerability from nvd – Published: 2026-09-30 00:19 – Updated: 2026-09-30 00:19

Title

AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

Summary

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-321 - Use of Hard-coded Cryptographic Key

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/2f0e954f2…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-7.5.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 7.5.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "7.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-321",
              "description": "Use of Hard-coded Cryptographic Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:11.252Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-4m55-xhcm-wjcr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-4m55-xhcm-wjcr"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/auth.ts#L51-L59"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-7.5.0-before-12.0.0-authentication-bypass-via-hard-coded-jwt-secret"
        }
      ],
      "title": "AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103055",
    "datePublished": "2026-09-30T00:19:11.252Z",
    "dateReserved": "2026-09-29T23:34:43.879Z",
    "dateUpdated": "2026-09-30T00:19:11.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103054 (GCVE-0-2026-103054)

Vulnerability from nvd – Published: 2026-09-30 00:19 – Updated: 2026-09-30 16:56

Title

AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP

Summary

AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim unclaimed tenants and read their security alerts, incidents, and posture metrics without consent.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 16:56 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/151264a8b…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-10.0.0…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 10.0.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103054",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T16:56:27.170536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T16:56:38.804Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mcg9-8pxf-j98v"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim unclaimed tenants and read their security alerts, incidents, and posture metrics without consent."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:10.583Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-mcg9-8pxf-j98v)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mcg9-8pxf-j98v"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/151264a8b846db55099e5e0f4d76c388e8df4a92"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/api/app/api/v1/endpoints/mssp.py#L1073-L1110"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-10.0.0-before-12.0.0-unauthorized-tenant-access-via-mssp"
        }
      ],
      "title": "AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103054",
    "datePublished": "2026-09-30T00:19:10.583Z",
    "dateReserved": "2026-09-29T23:34:43.511Z",
    "dateUpdated": "2026-09-30T16:56:38.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103053 (GCVE-0-2026-103053)

Vulnerability from nvd – Published: 2026-09-30 00:19 – Updated: 2026-09-30 13:57

Title

AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

Summary

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve actions on behalf of arbitrary principals, and dispatch containment actions using vendor credentials.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

5.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 13:57 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/dac397234…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-9.0.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 9.0.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103053",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T13:57:32.727782Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T13:57:54.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-g4h7-p63q-r8r4"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve actions on behalf of arbitrary principals, and dispatch containment actions using vendor credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:09.978Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-g4h7-p63q-r8r4)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-g4h7-p63q-r8r4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/security/authz.py#L104-L121"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-9.0.0-before-12.0.0-missing-authentication-on-actions-service-response-action-api"
        }
      ],
      "title": "AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103053",
    "datePublished": "2026-09-30T00:19:09.978Z",
    "dateReserved": "2026-09-29T23:34:43.109Z",
    "dateUpdated": "2026-09-30T13:57:54.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103057 (GCVE-0-2026-103057)

Vulnerability from cvelistv5 – Published: 2026-09-30 00:19 – Updated: 2026-09-30 13:56

Title

AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

Summary

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 13:56 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/2f0e954f2…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-5.1.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 5.1.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103057",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T13:56:33.984674Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T13:56:57.220Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mqjp-pcpr-7c37"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:12.549Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-mqjp-pcpr-7c37)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mqjp-pcpr-7c37"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/index.ts#L681-L691"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-5.1.0-before-12.0.0-missing-authentication-on-realtime-service-internal-endpoints"
        }
      ],
      "title": "AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103057",
    "datePublished": "2026-09-30T00:19:12.549Z",
    "dateReserved": "2026-09-29T23:34:44.573Z",
    "dateUpdated": "2026-09-30T13:56:57.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103056 (GCVE-0-2026-103056)

Vulnerability from cvelistv5 – Published: 2026-09-30 00:19 – Updated: 2026-09-30 18:09

Title

AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

Summary

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated users can inject single quotes into file_path, path, script_name, or script_args parameters to break out of quoted arguments and execute arbitrary commands on managed endpoints with SYSTEM or root privileges.

Severity

9.4 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 18:02 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

VulnCheck mitre root Scorecard

References

6 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/dac397234…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-7.2.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 7.2.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103056",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T18:02:45.621861Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:32.342Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated users can inject single quotes into file_path, path, script_name, or script_args parameters to break out of quoted arguments and execute arbitrary commands on managed endpoints with SYSTEM or root privileges."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.4,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:11.887Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-7q37-2wfw-xrx7)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/clients/crowdstrike_rtr.py#L273"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/executors/endpoint.py#L442"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-7.2.0-before-12.0.0-command-injection-via-crowdstrike-rtr"
        }
      ],
      "title": "AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103056",
    "datePublished": "2026-09-30T00:19:11.887Z",
    "dateReserved": "2026-09-29T23:34:44.223Z",
    "dateUpdated": "2026-09-30T18:09:32.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103055 (GCVE-0-2026-103055)

Vulnerability from cvelistv5 – Published: 2026-09-30 00:19 – Updated: 2026-09-30 00:19

Title

AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

Summary

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-321 - Use of Hard-coded Cryptographic Key

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/2f0e954f2…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-7.5.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 7.5.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "7.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-321",
              "description": "Use of Hard-coded Cryptographic Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:11.252Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-4m55-xhcm-wjcr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-4m55-xhcm-wjcr"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/auth.ts#L51-L59"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-7.5.0-before-12.0.0-authentication-bypass-via-hard-coded-jwt-secret"
        }
      ],
      "title": "AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103055",
    "datePublished": "2026-09-30T00:19:11.252Z",
    "dateReserved": "2026-09-29T23:34:43.879Z",
    "dateUpdated": "2026-09-30T00:19:11.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103054 (GCVE-0-2026-103054)

Vulnerability from cvelistv5 – Published: 2026-09-30 00:19 – Updated: 2026-09-30 16:56

Title

AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP

Summary

AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim unclaimed tenants and read their security alerts, incidents, and posture metrics without consent.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 16:56 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/151264a8b…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-10.0.0…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 10.0.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103054",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T16:56:27.170536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T16:56:38.804Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mcg9-8pxf-j98v"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim unclaimed tenants and read their security alerts, incidents, and posture metrics without consent."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:10.583Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-mcg9-8pxf-j98v)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-mcg9-8pxf-j98v"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/151264a8b846db55099e5e0f4d76c388e8df4a92"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/api/app/api/v1/endpoints/mssp.py#L1073-L1110"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-10.0.0-before-12.0.0-unauthorized-tenant-access-via-mssp"
        }
      ],
      "title": "AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103054",
    "datePublished": "2026-09-30T00:19:10.583Z",
    "dateReserved": "2026-09-29T23:34:43.511Z",
    "dateUpdated": "2026-09-30T16:56:38.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-103053 (GCVE-0-2026-103053)

Vulnerability from cvelistv5 – Published: 2026-09-30 00:19 – Updated: 2026-09-30 13:57

Title

AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

Summary

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve actions on behalf of arbitrary principals, and dispatch containment actions using vendor credentials.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

5.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-30 13:57 UTC

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

VulnCheck mitre root Scorecard

References

5 references

URL	Tags
https://github.com/beenuar/AiSOC/security/advisor…	vendor-advisory
https://github.com/beenuar/AiSOC/commit/dac397234…	patch
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	release-notes
https://github.com/beenuar/AiSOC/blob/v11.2.0/ser…	technical-description
https://www.vulncheck.com/advisories/aisoc-9.0.0-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
beenuar	AiSOC	Affected: 9.0.0 , < 12.0.0 (semver)

Date Public

2026-09-29 00:00

Credits

hyderpwn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-103053",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-30T13:57:32.727782Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-30T13:57:54.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-g4h7-p63q-r8r4"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AiSOC",
          "repo": "https://github.com/beenuar/AiSOC",
          "vendor": "beenuar",
          "versions": [
            {
              "lessThan": "12.0.0",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "hyderpwn"
        }
      ],
      "datePublic": "2026-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve actions on behalf of arbitrary principals, and dispatch containment actions using vendor credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-30T00:19:09.978Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-g4h7-p63q-r8r4)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/beenuar/AiSOC/security/advisories/GHSA-g4h7-p63q-r8r4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2"
        },
        {
          "name": "AiSOC v12.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/beenuar/AiSOC/releases/tag/v12.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/security/authz.py#L104-L121"
        },
        {
          "name": "VulnCheck Advisory: AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/aisoc-9.0.0-before-12.0.0-missing-authentication-on-actions-service-response-action-api"
        }
      ],
      "title": "AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-103053",
    "datePublished": "2026-09-30T00:19:09.978Z",
    "dateReserved": "2026-09-29T23:34:43.109Z",
    "dateUpdated": "2026-09-30T13:57:54.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

10 vulnerabilities by beenuar

CVE-2026-103057 (GCVE-0-2026-103057)

CVE-2026-103056 (GCVE-0-2026-103056)

CVE-2026-103055 (GCVE-0-2026-103055)

CVE-2026-103054 (GCVE-0-2026-103054)

CVE-2026-103053 (GCVE-0-2026-103053)

CVE-2026-103057 (GCVE-0-2026-103057)

CVE-2026-103056 (GCVE-0-2026-103056)

CVE-2026-103055 (GCVE-0-2026-103055)

CVE-2026-103054 (GCVE-0-2026-103054)

CVE-2026-103053 (GCVE-0-2026-103053)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

10 vulnerabilities by beenuar

CVE-2026-103057 (GCVE-0-2026-103057)

CVE-2026-103056 (GCVE-0-2026-103056)

CVE-2026-103055 (GCVE-0-2026-103055)

CVE-2026-103054 (GCVE-0-2026-103054)

CVE-2026-103053 (GCVE-0-2026-103053)

CVE-2026-103057 (GCVE-0-2026-103057)

CVE-2026-103056 (GCVE-0-2026-103056)

CVE-2026-103055 (GCVE-0-2026-103055)

CVE-2026-103054 (GCVE-0-2026-103054)

CVE-2026-103053 (GCVE-0-2026-103053)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.