CVE-2026-5380

概要

参考情報

• help.runzero.com/docs/release-notes · Release Notes
• runzero.com/advisories/runzero-platform-cleartext-exposure-cve-2026-5380 · Vendor Advisory

runzero platform のその他の脆弱性

• CVE-2026-5384中 5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved…
• CVE-2026-5383中 4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved. This is an instance…
• CVE-2026-5382低 3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst…
• CVE-2026-5381低 2.2An issue that could expose task information outside of the authorized organization scope has been resolved. This is an instance of CWE-863: …
• CVE-2026-5379低 3.0An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved. Th…