CVE-2026-108142

Published Oct 27, 2026 CWE-636

Description

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

Is your site exposed to CVE-2026-108142?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-636 CWE-636

References

Other References

https://www.veeam.com/kb4948

Frequently Asked Questions

What is CVE-2026-108142? +
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
How do I check if I'm vulnerable to CVE-2026-108142? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-82744

Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so …
CVE-2026-95676

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor …
CVE-2026-42246

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a …
CVE-2026-53712

SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) …
CVE-2026-103510

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an …
CVE-2026-77866

Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2026-108142 — free, no signup required.