THREAT OPS › Threat News › [NVD] CVE-2026-82452 (CRITICAL 9.8) — rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessin
[NVD] CVE-2026-82452 (CRITICAL 9.8) — rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessin
CVE-2026-82452 CVSS: 9.8 CRITICAL Published: 2026-08-29T14:16:38.210
rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected endpoints without providing valid cr
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-82452cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82452