CVE-2026-71216

MediumCVSS 5.3

Published: 04/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 04/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

The PagerDuty alarm hook in Apache SkyWalking transmits the integration routing key over cleartext HTTP. Although PagerDuty serves over HTTPS and normally redirects plain HTTP to HTTPS, the initial POST request with the JSON body containing the routing key is sent unencrypted before any redirect response is received. The issue affects versions from 9.6.0 through 11.0.0.

Risk Assessment

The integration routing key can be intercepted by an attacker during transmission, potentially allowing unauthorized sending of alerts to PagerDuty or impersonation of the system.

Recommendation

Upgrade Apache SkyWalking to version 11.0.0, which fixes the issue, and ensure connections are encrypted.

Other vulnerabilities in Apache SkyWalking

CVE-2025-54057Medium
Apache SkyWalking contains a Basic XSS vulnerability due to improper neutralization of script-related HTML tags in web pages. The issue affects versions up to and including 10.2.0.

Original NVD description (English source)

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to the socket unencrypted before any redirect response is received. Redirection affects only whether the request is retried securely, not whether the first copy left the host in the clear. This issue affects Apache SkyWalking: from 9.6.0 through 11.0.0. Users are recommended to upgrade to version 11.0.0, which fixes the issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS