Miembros de
Boletines de Vulnerabilidades |
CVE-2026-103057 |
|
| Software afectado | REDIS |
| AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-103057 | |
