Vanus-labs
Vanus-labs Security Releases - October 2026
vanus-labs-2026-10 Oct 1, 2026 Source: Vendor
Vanus-labs security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-111998
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-111998
BR2026-0000-037252
vanus
unclaimed
Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can se...
Credited as MJ DHURGESH
CVE-2026-111999
BR2026-0000-037253
vanus
unclaimed
Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receive...
Credited as MJ DHURGESH
CVE-2026-112000
BR2026-0000-037254
vanus
unclaimed
Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks...
Credited as MJ DHURGESH