Skip to content
OpenAdvisories

Vendor

web-infra-dev

3 known vulnerabilities.

Products

midscene 1 rsbuild 1 rsdoctor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-59804

    Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket

    Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connect…

    web-infra-dev midscene