CVE-2026-23596

Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Medium · published February 17, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00268 · 17.9th percentile
Published
2026-02-17T20:46Z
EPSS history
Timeline
  • 17 FEB 20:46Z
    Unauthenticated Improper Access Control in management API allows unauthorized service disruption
    cvelistv5