PT-2026-76802
CVE-2026-75108
·
تاريخ النشر
2026-08-17
·
تاريخ التحديث
2026-09-17
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Next Terminal (affected versions not specified)
Description
Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints. This allows any authenticated user to probe and wake assets they are not authorized to access by calling these endpoints with arbitrary asset identifiers. This can lead to the retrieval of asset information, such as display names, reachability status, connection timing, and network addresses, or the triggering of wake-on-LAN packets on unauthorized assets.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾