Skip to content
OpenAdvisories

Vendor

vesoft-inc

1 known vulnerabilities.

Products

nebula 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-81032

    NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration

    NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags…

    vesoft-inc nebula