Skip to content
OpenAdvisories

Vendor

TencentBlueKing

1 known vulnerabilities.

Products

bk-cmdb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119648

    BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail

    Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting oth…

    TencentBlueKing bk-cmdb