Tbc
Monthly
Unauthenticated network attackers may be able to reach and invoke critical functionality of 'tbc' releases prior to version 1.0 without supplying any credentials, a failure mode classified as missing authentication for a critical function (CWE-306); the unconstrained CVSS 4.0 score of 10.0 and our assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) both indicate complete loss of confidentiality, integrity and availability with a changed security scope. The practical caveat is significant: the CVE description is a placeholder that names no endpoint, protocol, or deployment configuration, so the exact preconditions remain unverifiable and our independent assessment explicitly records that the available signals conflict sharply. Exploitation pressure currently looks low - EPSS is just 0.14% (3rd percentile) and no public exploit has been identified at time of analysis - yet a vendor patch exists and ENISA/EUVD lists every release from 0 up to (but excluding) 1.0 as affected.
Unauthenticated network attackers may be able to reach and invoke critical functionality of 'tbc' releases prior to version 1.0 without supplying any credentials, a failure mode classified as missing authentication for a critical function (CWE-306); the unconstrained CVSS 4.0 score of 10.0 and our assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) both indicate complete loss of confidentiality, integrity and availability with a changed security scope. The practical caveat is significant: the CVE description is a placeholder that names no endpoint, protocol, or deployment configuration, so the exact preconditions remain unverifiable and our independent assessment explicitly records that the available signals conflict sharply. Exploitation pressure currently looks low - EPSS is just 0.14% (3rd percentile) and no public exploit has been identified at time of analysis - yet a vendor patch exists and ENISA/EUVD lists every release from 0 up to (but excluding) 1.0 as affected.