CVE-2026-101177: Low severity vulnerability
Published Nov 2, 2026
·Updated
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Event History
Nov 2, 2026
CVE Published
via NVD·07:18 AM
Data Sourced
via NVD·07:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed to attack?
Deployments where the affected Optimizer module is reachable over a network are within the stated attack vector.
2
Does an attacker need an account or user interaction to exploit this issue?
No. The supplied vector indicates no privileges are required and no user interaction is required, although exploitation has high attack complexity.