Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2024-26480 An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter. https://www.cve.org/CVERecord?id=CVE-2024-26480
Post summary
The post announces CVE-2024-26480 in Statping-ng v.0.91.0, noting that crafted requests to the admin parameter can leak sensitive information. No PoC, exploit tool, patch, or active exploitation evidence is provided.
CVE-2024-26480 Information Disclosure Vulnerability in Statping-ng v0.91.0 Admin Parame... https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-26480 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
A newly disclosed information disclosure vulnerability (CVE-2024-26480) in Statping-ng v0.91.0 is announced with links to detailed vulnerability information and a notification.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | statping-ng | statping-ng | 0.91.0 | - | - |