CVE-2026-53469

Published: Jun 10, 2026Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments, leading to a critical loss of availability and integrity across the entire SaaS platform.

Affected (1)

Products: Kebev2v: Migration Assessment

1 product

Migration Assessment

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kebev2v Migration Assessment	Before 0.13.5

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (3)

https://access.redhat.com/security/cve/CVE-2026-53469

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2487065

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://github.com/kubev2v/migration-planner/pull/1227

Source: secalert@redhat.com

Patch

Timeline

No history available yet.