CVE-2026-66083

Published 29 September 2026 · tracked since 29 September 2026

Description

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata, dependin

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-129267 LOW 3.5
• CVE-2026-127115 MEDIUM 5.4
• CVE-2026-120687 HIGH 7.2
• CVE-2026-116753 HIGH 7.2
• CVE-2026-110531 MEDIUM 6.4
• CVE-2026-19907 CRITICAL 9.8
• CVE-2026-18053 HIGH 8.8
• CVE-2026-129433 CRITICAL 9.9
• CVE-2026-129254 MEDIUM 4.3
• CVE-2026-120522 CRITICAL 9.8

→ Open the live CVE board · all tools