VulnSocial

CVE-2026-49050General

LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts

Recommended action window: High priority (within 72h)

Back to dashboard
2.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Exploit tooling references are present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-17); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-17: 1Mentions · 2026-08-25: 1Mentions · 2026-08-26: 1Exploit Tool / Code · 2026-08-26: 1Patch / Workaround · 2026-08-25: 1Patch / Workaround · 2026-08-26: 1Technical Details · 2026-08-25: 1Technical Details · 2026-08-26: 106-1708-2508-26
Signal classification3 categories
General
133.3%
Patch
133.3%
Disclosure
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-171
General1
2026-08-251
Patch1
2026-08-261
Disclosure1
Full discourse3 posts
  • CCB Alert@CCBalert
    Disclosure

    Warning: Moderate Access Control flaw in #Apache #DolphinScheduler. #CVE-2026-49050 CVSS: 8.8. A general user can mint admin access tokens via /access-tokens! Upgrade to 3.4.2. #Patch #Patch #Patch

    Post summary

    An alert about CVE-2026-49050, a moderate access control flaw in Apache DolphinScheduler that lets general users generate admin tokens, with a recommendation to upgrade to v3.4.2.

    01001270
    7.2K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-49050 General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to versi… https://www.cve.org/CVERecord?id=CVE-2026-49050

    Post summary

    A privilege escalation issue in Apache DolphinScheduler (before 3.4.2) allows normal users to mint admin tokens via /access-tokens, and users are advised to upgrade to a patched version.

    00000785
    58.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-49050 CVE-2026-49050 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49050

    Post summary

    The post merely cites CVE-2026-49050 twice and links to a vulnerability details page, offering no further technical or operational information.

    0000059
    4.0K followersView on X

Explore more

Back to dashboard