CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123807
CRITICALCVSS 9.8NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
Signal K Server is a server application that runs on a central hub in a boat. From 2.0.0 until 2.34.0 for Signal K Server and from 1.0.0 until 1.5.3 for @signalk/resources-provider, the v2 REST route GET /signalk/v2/api/resources/:resourceType/:resourceId accepts an unsafe resourceId that can escape
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125112
- CVE-2026-125107 HIGH 7.5
- CVE-2026-123817
- CVE-2026-123816 HIGH 8.1
- CVE-2026-123815
- CVE-2026-123814 MEDIUM 6.4
- CVE-2026-123813 HIGH 7.5
- CVE-2026-123810 MEDIUM 4.3
- CVE-2026-123806 MEDIUM 4
- CVE-2026-114032 HIGH 7.8