CVE-2026-11815
Last modified
CVE-2026-11815 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.
Metrics
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Layer 7 API Gateway | 11.2.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-11815?
How severe is CVE-2026-11815?
How do I fix CVE-2026-11815?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11809The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.…3.7
- CVE-2026-1181Altium 365 workspace endpoints were configured with an overl…9
- CVE-2026-11810The UpdateHub firmware-update agent's probe handler (z_impl_…7.5
- CVE-2026-11811The UpdateHub over-the-air update client's start_coap_client…3.7
- CVE-2026-11812The UpdateHub management subsystem (subsys/mgmt/updatehub/up…2.5
- CVE-2026-11814A command injection vulnerability in the listed NETGEAR mode…4.9
- CVE-2026-11816Keras versions prior to 3.14.0 are vulnerable to a path trav…8.1
- CVE-2026-11818The WPCafe – Restaurant Menu, Online Food Ordering & Table B…5.4
- CVE-2026-11819Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDI…5.5
- CVE-2026-1182GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
- CVE-2026-11820A flaw was found in the community.general Ansible collection…6.5
- CVE-2026-11822SQLite before 3.53.2 contains memory corruption vulnerabilit…8.5
Are you affected by CVE-2026-11815?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST