CVE Catalog
CVE-2026-22096
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.42%
34th percentile - higher than 34% of all known CVEs
Summary
The web server on port 8090 does not require authentication, allowing sensitive information leakage such as configured passwords and file uploads through various endpoints.
Risk Assessment
An attacker can access confidential data, including passwords, and upload malicious files, leading to a breach of system confidentiality and integrity.
Recommendation
Immediately implement authentication for the web server on port 8090 and restrict access to trusted networks only.
Original NVD description (English source)
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints.