CVE-2026-50224
Web Admin Panel IPv6 Exposure on Port 8080
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: 8fc372e3-d9c5-46e4-9410-38469745c639
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs because the web administration panel is configured to bind broadly to the public IPv6 address space on port [::]:8080 without any default firewall restrictions.
As a result, internal API endpoints that should normally be protected and accessible only within a private network become reachable over the wide area network (WAN), exposing them to potential unauthorized access.
How can this vulnerability impact me? :
Because internal API endpoints are exposed to the public internet without firewall limits, attackers could potentially access sensitive administrative functions remotely.
This exposure increases the risk of unauthorized access, data leakage, or manipulation of the system through these internal APIs.