CVE-2026-87108 — Ops Manager Improper Authorization in Daily Host Monitoring Retrieval
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required re…
Published: 2026-10-09 · CVSS: 2.3 · CVSS 4.0
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7