← Back to search

CVE-2026-102387

7.5 HIGH

Published 2026-10-06 · Updated 2026-10-06

AI risk analysis

Summary
The Xserver Migrator application has an unauthenticated sensitive data exposure vulnerability that allows attackers to access sensitive information without requiring any authentication. This represents a significant risk as it can expose confidential data to unauthorized parties.
Exploitability
Exploitation is straightforward with no prerequisites as the vulnerability affects unauthenticated access to sensitive data.
Blast radius
The impact could be substantial across all systems running vulnerable versions of Xserver Migrator, potentially exposing sensitive configuration details, user credentials, or system information to attackers.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 1.6.7 or later to remediate this vulnerability.
data-exfiltrationunauthenticatedsensitive-data

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-497

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.