Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: hyperdxio Clear all filters
TI-2026-56744 CVE-2026-82279 · GHSA-gcxp-837c-3488

HyperDX Team Management Operations Missing Role-Based Access Control

Priority HIGH 65

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00504 Published 2026-08-28 No fix listed CWE-862
TI-2026-45318 CVE-2026-63731 · GHSA-687c-pppw-76h3

HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpoint

Priority MEDIUM 61

HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplying a caller-controlled host parameter to…

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00303 Published 2026-07-20 Fixed in 2.31.0 CWE-918
TI-2026-45317 CVE-2026-63730 · GHSA-2f42-7f9w-fc76

HyperDX < 2.31.0 SSRF via Webhook Test Endpoint

Priority MEDIUM 63

HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to make requests to arbitrary internal network destinations by supplying a caller-con…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2026-07-20 Fixed in 2.31.0 CWE-918