PT-2026-76802

CVE-2026-75108

·

تاريخ النشر

2026-08-17

·

تاريخ التحديث

2026-09-17

الوصف من

CVSS 3.1
5.4
متوسطة
المقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Next Terminal (affected versions not specified)
Description Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints. This allows any authenticated user to probe and wake assets they are not authorized to access by calling these endpoints with arbitrary asset identifiers. This can lead to the retrieval of asset information, such as display names, reachability status, connection timing, and network addresses, or the triggering of wake-on-LAN packets on unauthorized assets.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾