VULNERABILITY INTELLIGENCE

CVE-2023-26150

CVSS score7.5 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2023-10-03
Last modified2026-06-17

Description

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an active session.