EUVD-2026-60387
GHSA-w2mq-ccqc-phrv
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PR:L reflects mandatory authenticated portal session; C:L for asset metadata disclosure; I:L for unauthorized WoL dispatch; no availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
1DescriptionCVE.org
Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information including display names, reachability status, connection timing, and network addresses, or trigger wake-on-LAN packets on unauthorized assets.
AnalysisAI
Broken object-level authorization on the portal ping and wake-on-LAN endpoints in Next Terminal exposes all registered asset metadata and WoL controls to any authenticated portal user, regardless of their assigned asset permissions. The wildcard CPE (all versions) indicates no patched release exists, and the flaw is rooted in CWE-862 (Missing Authorization) - a structural gap in the access-control layer rather than a logic edge case. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session on the Next Terminal portal; any account with PR:L (low-privilege) access is sufficient - no administrative role, elevated permission, or special group membership is needed, as the flaw exists in the default authorization model applied to all portal users. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N) positions this as a network-exploitable, low-complexity flaw requiring only a low-privileged portal account - the lowest realistic authentication bar short of none. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who obtains any valid Next Terminal portal credential - through legitimate provisioning, phishing, credential stuffing, or account compromise - iterates sequential or guessed asset identifiers against the portal ping endpoint, collecting display names, IP addresses, and reachability status for assets they were never authorized to see. Armed with this internal network map, the attacker selects offline assets of interest and issues unauthorized WoL packets through the gateway, bringing those machines online and potentially expanding their footprint into previously dormant segments of the network. |
| Remediation | No vendor-released patch has been identified at time of analysis - the wildcard CPE version range and absence of a fix commit or tagged release in the referenced GitHub issue confirm this. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today