CVE-2026-103057

Name of the Vulnerable Software and Affected Versions AiSOC versions 5.1.0 through 11.9.9

Description An authentication bypass exists in the realtime service internal endpoints 'POST /internal/agent-event' and 'POST /internal/push'. This allows attackers to submit arbitrary events using spoofed tenant identifiers to broadcast malicious content via WebSocket and Redis SSE (Server-Sent Events) channels, or to send unauthorized notifications to registered devices.

Recommendations Update AiSOC to version 12.0.0 or later. Restrict access to the 'POST /internal/agent-event' and 'POST /internal/push' endpoints to minimize the risk of exploitation.