一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月3日

CVE-2026-105030 [MEDIUM] – Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unau

未分类
📑 文章目录

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as monitor-bar and monitor-latency-chart to obtain names, descriptions, status, uptime history and latency.