A vulnerability classified as critical was found in STACKIT IaaS API. This affects an unknown function of the component Instance Metadata Service. Such manipulation leads to missing authorization. This vulnerability is listed as CVE-2026-39910. The attack may be performed from remote. There is no available exploit. This product is available as a... Weiterlesen: CVE-2026-39910 | STACKIT IaaS API prior 2026-05-28 Instance Metadata …
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-39910 | STACKIT IaaS API prior 2026-05-28 Instance Metadata Service authorization
A vulnerability classified as critical was found in STACKIT IaaS API. This affects an unknown function of the component Instance Metadata Service. Such…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-39910
Exploitation: none (Keine bekannte Ausnutzung)Automatable: yes (Automatisierbar)Technical Impact: total (Vollständig)
Quelle: CISA-ADP vulnrichment · Stand 2026-06-09T15:41:55.937004Z · CISA Coordinator
Advisory Radar
Workaround & Virtual-Patching empfohlen
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Öffentliche PoCs existieren. Isolieren Sie das System oder wenden Sie Micro-Segmentierungsregeln an, bis offizielle Patches vorliegen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencestatus.stackit.cloud
1 öffentliche Exploit-Referenz(en) detektiert (VulnCheck Exploit Intelligence).
PoC einsehen
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
Was this page helpful?