CVE-2026-108581

CVE-2026-108581 published: TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which...

View full NVD advisory → ← Back to CVE watch