Skip to content
OpenAdvisories

Vendor

STACKIT

1 known vulnerabilities.

Products

IaaS API 1
All Critical High Medium Low Exploited only

1 result · Feed

  • High 8.8
    CVE-2026-39910

    STACKIT IaaS API Privilege Escalation via Service Account Attachment

    STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated, low-privileged attacker can attach an arbitrary service account to a virtual machine they control without validation of their permission to…

    STACKIT IaaS API