CVE-2026-18353 Blast Radius

HIGH • CVSS 8.8PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against an issuer allowlist using Python's `urlpa…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-18353.

Start Free Scan →← Back to CVE-2026-18353