Products: 1
Vulnerabilities: 9
Known Exploited: 0
1
Critical Level Threats
1
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-49258
Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)
Last Modified: Jul 28, 2026
Published: Jul 28, 2026
CVE-2026-48058
nebula-mesh: Session and OIDC state cookies lack the Secure attribute
Last Modified: Jul 28, 2026
Published: Jul 28, 2026
CVE-2026-47768
nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
Last Modified: Jul 28, 2026
Published: Jul 28, 2026
CVE-2026-47726
nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
Last Modified: Jul 28, 2026
Published: Jul 28, 2026
CVE-2026-47725
nebula-mesh: Web UI lacks CSRF tokens on /ui/* mutating endpoints
Last Modified: Jul 28, 2026
Published: Jul 28, 2026
Items Per Page
