bk-cmdb vulnerabilities

CVEs whose affected-version data names the bk-cmdb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119648Medium· 4.3PoC

1w ago

BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail

Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search co…

▾ TwilightTencentBlueKing · bk-cmdbEPSS 0.29%via CVEORG