CVE-2026-59387 - Broken access control restriction in Cloud Controller API
CVE ID :CVE-2026-59387 Published : Oct. 30, 2026, 9:17 a.m. | 43 minutes ago Description :The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ endpoints but omits an equivalent deny rule for /internal/v3/. As a result, the...