CVE-2026-77097

HighCVSS 8.2

Published: 08/09/2026(UTC)Updated: 11/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Private Metrics Server has a missing authentication condition affecting metrics upload functionality and service availability. Software customers should upgrade to the resolved maintenance release.

Risk Assessment

Missing authentication may allow unauthorized users to upload metrics or disrupt service availability, potentially leading to data integrity issues and downtime.

Recommendation

Upgrade Private Metrics Server to the latest patched version.

Other vulnerabilities in Private Metrics Server

CVE-2026-77098Critical
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers should upgrade to the resolved maintenance release. Update Private Metrics Server.

Original NVD description (English source)

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.