{
  "id": "CVE-2026-111998",
  "url": "https://spydr.io/cve/CVE-2026-111998",
  "published": "2026-10-18T12:17:11.730Z",
  "modified": "2026-10-19T21:14:14.150Z",
  "score": 9.3,
  "severity": "critical",
  "cvss_version": "4.0",
  "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "score_source": "vulncheck.com",
  "epss": 0.00533,
  "epss_percentile": 0.43834,
  "exploited": false,
  "kev": null,
  "ssvc_exploitation": "poc",
  "vendors": [
    "vanus-labs"
  ],
  "products": [
    "vanus-labs vanus"
  ],
  "cwes": [
    "CWE-1392"
  ],
  "description": "Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users, tokens, and role bindings, and read or publish events.",
  "status": "Deferred",
  "score_type": "Secondary",
  "scores": {
    "cvss_v40": 9.3,
    "cvss_v31": 9.8,
    "cvss_v30": null
  },
  "references": [
    {
      "url": "https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/controller/tenant/controller.go#L449-L500",
      "tags": []
    },
    {
      "url": "https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/primitive/constants.go#L37",
      "tags": []
    },
    {
      "url": "https://github.com/vanus-labs/vanus/issues/647",
      "tags": []
    },
    {
      "url": "https://www.vulncheck.com/advisories/vanus-0.8.0-through-0.9.0-default-admin-credentials-via-gateway",
      "tags": []
    }
  ],
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111998",
  "covered_in": [],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}