CVE-2026-82267 in Komodo
要約
〜によって MITRE • 2026年08月28日
Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/{variant} handlers. Authenticated users can guess resource names to obtain internal identifiers and insert fraudulent audit log entries misrepresenting privileged operations.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.