CVE-2026-76244: falha crítica em eidetic-labs stigmem
stigmem-node Insecure Federation Transport Configuration
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 0.3%
stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation traffic to cleartext interception and man-in-the-middle attacks.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
eidetic-labs · stigmemCVEs relacionadas — eidetic-labs stigmem
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76243CRITICALstigmem before 0.9.0a2 Authentication Bypass via Disabled AuthEPSS 0.6%CVE-2026-76240HIGHstigmem Postgres SQL Injection via Schema IdentifierEPSS 0.4%CVE-2026-76242CRITICALstigmem Federation Peer Registration Authentication BypassEPSS 0.3%CVE-2026-76245HIGHstigmem Federation Peer Token Timestamp Validation BypassEPSS 0.2%CVE-2026-76241HIGHstigmem Plugin Signature Enforcement Bypass via ConfigurationEPSS 0.1%