STACKIT

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

STACKIT records in CISA KEV

No STACKIT vulnerabilities are listed in CISA KEV.

1 record

TI-2026-28782 CVE-2026-39910 · GHSA-p35h-r99r-9fcm

MEDIUM 41

STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00246 Published 2026-06-08 Fixed in 2026-05-28 CWE-862