CVE-2026-82829Suited to automated attack · CISA
Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
CVSS score
9.3
EPSS probability
%0.3
Risk score
0.0
Published
12 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-82824
Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
HI
Patch status unknownEPSS %0
9.3
CVE-2026-82825
Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
HI
Patch status unknownEPSS %0
9.3
CVE-2026-82827
A hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens
HI
Patch status unknownEPSS %0
8.7
CVE-2026-82828
Improper authorization may allow a general user to perform operations equivalent to those available with administrator privileges
HI
Patch status unknownEPSS %0
8.7
CVE-2026-82826
Authentication information or sensitive data may be intercepted in transit
HI
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-82829"