Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-129129 1 Beenuar 1 Aisoc 2026-11-13 6.5 Medium
AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve threat-intelligence results and set force to true to consume commercial provider API quota.