← Back to CVE search

CVE-2026-50224

unknown

Description

The web administration panel binds broadly to the public IPv6 address space on port [::]:8080 without default firewall limits, making internal API endpoints reachable over the WAN.

CVSS 4.9EPSS 0.234%Risk 0.5
View source
Published
2026-06-04 10:16:40
Affected versions
unknown
Type
Other
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N