> CVE-2026-31309

« BACK_TO_HOME
PUBLISHED
2026-07-08 22:17
MODIFIED
2026-07-08 22:17
EPSS (Prob. Exploit)
0.62%
Top 50.9%
DATA SOURCES:
NVD 🔗 2026-07-08 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-26

> DESCRIPTION

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node before v1.36.0 allows unauthenticated attackers to arbitrarily overwrite the node's configuration and achieve a full node takeover via supplying a crafted POST request.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
75 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
08/07/2026 22:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 3 months ago

> REFERENCES

https://github.com/mysteriumnetwork/node/
https://github.com/mysteriumnetwork/node/blob/1.35.5/tequilapi/tequil/routes.go#...
https://github.com/mysteriumnetwork/node/commit/83051199cd641dd4ed9057b958e5616d...
https://github.com/mysteriumnetwork/node/commit/bc099fcaff59fee9c8a8f8e07ffff5b3...
https://github.com/mysteriumnetwork/node/releases/tag/1.35.5
https://github.com/mysteriumnetwork/node/releases/tag/1.36.0
https://github.com/sch8ill/CVE-2026-31309
« BACK_TO_HOME