CVE-2026-75329
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project (including database passwords, API keys, etc.) by sending a TCP request without any credential.
Risk Assessment
Lack of authentication allows unauthorized access to sensitive configuration data, potentially leading to secret leakage, system integrity compromise, or attacks on other components.
Recommendation
Implement authentication and authorization for the configuration distribution service, and restrict access to port 8283 to trusted hosts only.
Original NVD description (English source)
The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project (including database passwords, API keys, etc.) by sending a TCP request without any credential.