Approved changes feed: RSS · Atom
cpe:2.3:a:moghtech:komodo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Moghtech (be571c4d-e5fb-5baa-92f2-88a05afa44c5) |
|---|---|
| Product | Komodo (ba8e70eb-43d9-5f34-8ab0-bee50fd3fda8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110631 |
vulnerable | 2026-11-03 10:16:01.005094 |
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration
CRITICAL (9.8)
Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_public_keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to issue Periphery API requests, including terminal sessions and container operations, executing commands on managed hosts typically as root.
Published: 2026-10-14T14:17:05.199Z
Updated: 2026-10-20T01:20:12.584Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.