Skip to content
OpenAdvisories

Vendor

beenuar

5 known vulnerabilities.

Products

AiSOC 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-103057

    AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

    AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast m…

    beenuar AiSOC
  • Medium 5.4
    CVE-2026-103053

    AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

    AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list respons…

    beenuar AiSOC