Read the docs

THU-MAIC

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

THU-MAIC records in CISA KEV

No THU-MAIC vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-59045 CVE-2026-86259 · GHSA-6j8v-fv4p-986p

OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

Priority HIGH 72

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services.

CVSS 4.0CRITICAL 9.0 Network No auth No interaction EPSS 0.00416 Published 2026-09-06 Fixed in 1.0.1 CWE-306
Open these records in search →