CyberRota
← Ana sayfaya dön

CVE-2026-16498

CRITICAL · CVSS 10

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-28T19:17:32.117 · Çekilme zamanı: 2026-07-29T00:07:42.404841+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-16498
Severity
CRITICAL
CVSS
10
EPSS
Yok

Orijinal NVD Açıklaması

The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.