https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T18:56:51.163775+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82276 fkie_cve-2026-82276 2026-10-05T18:56:51.192952+00:00

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.

 https://vulnerability.circl.lu/vuln/ghsa-h495-787q-g6hm GHSA-h495-787q-g6hm 2026-10-05T18:56:51.193044+00:00

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute() directly instead of implementing executeWithoutPassword(). Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database metadata, JVM statistics, and version information without credentials.