[ Vendor · 3 CVEs ]
vanus-labs
CVEs affecting vanus-labs published in the last 30 days, plus any vanus-labs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112000 | 18 Oct 2026 | CVSS 7.6 | vanus-labs vanusVanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack… | |
| CVE-2026-111998 | 18 Oct 2026 | CVSS 9.8 | vanus-labs vanusVanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by… | |
| CVE-2026-111999 | 18 Oct 2026 | CVSS 7.5 | vanus-labs vanusVanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any… |