THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-76244 — stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses exp

[NVD] CVE-2026-76244 — stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses exp

mednvdPublished 2026-08-19

CVE-2026-76244 CVSS: None Published: 2026-08-19T14:17:56.827

stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation traffic to cleartext interception and man-

Indicators of compromise

CVE-2026-76244cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-76244