← Back to search

CVE-2026-8372

8.8 HIGH

Published 2026-11-10 · Updated 2026-11-10

AI risk analysis

Summary
CVE-2026-8372 is an authentication bypass vulnerability (CWE-306) that allows an unauthenticated attacker to gain unauthorized access to a system over the network. The CVSS score of 8.8 indicates high severity due to the combination of confidentiality, integrity, and availability impacts.
Exploitability
Exploitation requires no prior access or privileges but likely requires user interaction (e.g., tricking a victim into visiting a malicious link or page) given the UI:R vector component.
Blast radius
Successful exploitation could lead to full system compromise including data theft, unauthorized modification, and service disruption across affected systems.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version or patch level is specified in the published description; upgrade to the latest vendor-recommended version or apply the specific patch referenced in the official advisory once available.
auth-bypasscwe306high-severitynetwork-exploitable

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A vulnerability that could allow an attacker to gain unauthorized access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.