CyberRota
← Ana sayfaya dön

CVE-2026-8335

UNKNOWN · CVSS N/A EPSS %0.19 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-10T15:16:42.803 · Çekilme zamanı: 2026-06-30T12:16:22.179237+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

GitHub PoC Linkleri

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-8335
Severity
UNKNOWN
CVSS
N/A
EPSS
%0.19

Orijinal NVD Açıklaması

A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are considered vulnerable. Status of next releases is unknown as the vulnerability has not been addressed by any patch.