{"id":"CVE-2026-8372","published":"2026-11-10T06:17:10.420","lastModified":"2026-11-10T06:17:10.420","description":"A vulnerability that could allow an attacker to gain unauthorized access.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"CVE-2026-8372 is an authentication bypass vulnerability (CWE-306) that allows an unauthenticated attacker to gain unauthorized access to a system over the network. The CVSS score of 8.8 indicates high severity due to the combination of confidentiality, integrity, and availability impacts.","exploitability":"Exploitation requires no prior access or privileges but likely requires user interaction (e.g., tricking a victim into visiting a malicious link or page) given the UI:R vector component.","blast_radius":"Successful exploitation could lead to full system compromise including data theft, unauthorized modification, and service disruption across affected systems.","remediation":"No fixed version or patch level is specified in the published description; upgrade to the latest vendor-recommended version or apply the specific patch referenced in the official advisory once available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","cwe306","high-severity","network-exploitable"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:49:11.645Z"}}