cveboard RSS feed

CVE-2026-102748

GitHubCritical, go

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable.

No known exploitation
Severity
Critical, CVSS 9.2 (v4.0)
EPSS
0.49% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
Affected packages