CVE-2026-82882 | Devtron Labs up to 2.2.0 webhook project/environment/application improper authorization

August 31, 2026 Yanac

A vulnerability was found in Devtron Labs Devtron up to 2.2.0. It has been rated as critical. Affected is an unknown function of the file /orchestrator/api-token/webhook. This manipulation of the argument project/environment/application causes improper authorization.

This vulnerability is registered as CVE-2026-82882. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More