Vulnerabilities CVE-2026-65310

CVE-2026-65310

High

Open

TLP:CLEAR

Missing authentication and permissive CORS policy

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server configuration.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.32%

24.7th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Confidence: 90%
Published: Jul 31, 2026
Last Modified: Jul 31, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.