https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:09:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-69111 <p><strong>Affected:</strong> milvus-io milvus</p> <p>Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a &#39;role&#39; parameter to shut down the proxy, datanode, or querynode components, resulting in denial of service.</p> <p><strong>Affected:</strong> milvus-io milvus</p> <p>Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a &#39;role&#39; parameter to shut down the proxy, datanode, or querynode components, resulting in denial of service.</p> https://vulnerability.circl.lu/vuln/cve-2026-69111