CVE-2026-38671: n/a n/a

Affected technology

n/a · n/a
Vendor not specified by the source

Description’s affected range: version available) allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint

Component: Not specified by the source

What an attacker can do

A remote attacker can execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint.

Published 19-Oct-2026 14:02 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-19 14:02:10.907757+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-38671.html