CVE-2026-71299 — Maestro: maestro: rest api write endpoints registered without authentication middleware
A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write o…
Published: 2026-10-05 · CVSS: 6.5 · CVSS 3.1
A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity issues or a denial of service (DoS).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7