{"id":"CVE-2026-89017","published":"2026-11-06T18:18:22.380","lastModified":"2026-11-11T05:19:54.677","description":"Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to retrieve the installation-specific BrokerGateway key even while pairing mode is disabled. Attackers can use the retrieved key to obtain the unrestricted DataMinerUser.creds NATS credential and gain trusted message-bus access via TCP port 4222 without any prior DataMiner credentials. Fixed in DataMiner 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-306","CWE-798"],"vendors":[],"products":[],"references":[{"url":"https://community.dataminer.services/critical-dataminer-security-upgrade/","tags":[]},{"url":"https://www.vulncheck.com/advisories/skyline-dataminer-brokergateway-embedded-api-key-authentication-bypass","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}