← Database

CVE-2026-31983

MEDIUM CVSS: 5.3 Published: 2026-07-09 Modified: 2026-08-11

Description

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.

Affected Platforms

Nozominetworks GuardianNozominetworks Cmc

Weakness Type

CWE-306

References