CVE-2026-90454

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An improper access control issue exists in a deployment mode designed to provide read-only access to a bundled packet-analysis component's interface. The system denies write-capable routes based on a pattern; however, this pattern fails to include routes used to modify tags on stored session records. Because the proxy configuration permits the request methods used by these omitted routes, an authenticated user can bypass the read-only restriction to add or remove tags on stored session records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.