{"id":"CVE-2026-65310","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-65310","generatedAt":"2026-10-28T02:17:33.466Z","title":"ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response.","description":"ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration\nof affected versions, exposes its data and configuration endpoint\nwithout any authentication and permissive CORS on every response. An\nunauthenticated attacker with network access can read live process\nvalues and server configuration.","published":"2026-07-31T09:16:58.000Z","lastModified":"2026-08-28T15:28:33.000Z","status":"Deferred","sourceIdentifier":"office@cyberdanube.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-306","CWE-942"],"affected":[],"epss":{"score":0.005,"percentile":0.42598,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.50%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.andritz.com/","source":"office@cyberdanube.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-65310","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}