A vulnerability, which was classified as problematic, was found in backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities and plugin-catalog-unprocessed-entities-common up to 0.6.10. Affected is an unknown function of the component Unprocessed Entities Read Endpoint. Such manipulation leads to incorrect authorization.
This vulnerability is referenced as CVE-2026-44374. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-44374 | backstage plugin-catalog-backend-module-unprocessed up to 0.6.10 Unprocessed Entities Read Endpoint authorization (GHSA-p7g9-rp3g-mgfg / EUVD-2026-30295)
A vulnerability, which was classified as problematic, was found in backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities and plugin-catalog-unprocessed-entities-common up to 0.6.10. Affected is an unknown…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR