Dashboard / CVE-2026-18678

CVE-2026-18678

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-08-12 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent No Auth

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: Passive
S: X
AT: Present
VC: None
VI: None
VA: None

Description

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection. An attacker on the network path between the operator and the control plane can intercept user or admin API tokens and then act against the control plane as that user.

Weakness Classification (1)

References & Advisories (3)

Bug Bounty Relevance

36 / 100
✓ No authentication

CVSS Score

5.5 / 10.0 v4.0
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.13%
Raw Score 0.001280
Percentile 2.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00128
2026-10-28
0.00128

Intelligence Sources

nvd ref →

External Links