CVE-2026-53469

Name of the Vulnerable Software and Affected Versions migration-planner (affected versions not specified)

Description An authenticated user can cause a critical loss of availability and integrity across the SaaS platform by sending a DELETE request to the '/api/v1/sources' endpoint. The issue stems from a lack of proper authorization and filtering, which allows for the destruction of all customer data, including sources, agents, and assessments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.