CVE-2026-119648 | Tencent BlueKing CMDB up to 3.14.6 Host Search Authorization asstdetail SearchHostWithAsstDetail improper authorization

October 30, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Tencent BlueKing CMDB up to 3.14.6. Affected by this issue is the function SearchHostWithAsstDetail of the file /api/v3/hosts/search/asstdetail of the component Host Search Authorization. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-119648. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More