CVE-2026-63288: High severity vulnerability
Published Nov 10, 2026
·Updated
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.
Event History
Nov 10, 2026
CVE Published
via NVD·06:17 AM
Data Sourced
via NVD·06:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must have adjacent-network access to the affected system. Exploitation does not require prior privileges or user interaction.
2
What is the likely impact if exploitation succeeds?
The vulnerability can allow unauthorized access to a separate API endpoint, bypassing its intended authentication layer. The reported impact includes high confidentiality and integrity impact, with low availability impact.