CVE-2026-108142: CDP Coordinator Service vulnerability
Published Oct 27, 2026
·Updated
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Affected Software
1 affected component
CDP Coordinator Service
Event History
Oct 27, 2026
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is described as exploitable by an unauthenticated attacker, so valid credentials are not required.
2
Which component should be assessed for exposure?
The affected component identified in the available information is the CDP Coordinator Service. The provided data does not identify affected versions, default exposure conditions, or a temporary mitigation.