CVE record · 1 source
CVE-2026-84748
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port.
- Vendor
- Apple, GitHub
- Product
- ios, github
- Exposure class
- Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port.
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.internal_port is documented to make builtin services…