GHSA-w6gp-x68f-qxchCriticalCVSS 9.8

The /v1/Plan service relies entirely on a shared global API token for full administrative...

Published
June 4, 2026
Last Modified
June 8, 2026

🔗 CVE IDs covered (1)

📋 Description

The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.

🔗 References (3)