CyberSecBulletin

Hyperdxio vulnerabilities

We track 2 vulnerabilities in Hyperdxio products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.

2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score

Latest Hyperdxio vulnerabilities

  • 8.1 High severity

    hyperdx: Missing Authorization

    CVE-2026-82279Hyperdxio

    HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending reques

  • 7.7 High severity

    hyperdx: Server-Side Request Forgery

    CVE-2026-63731Hyperdxio

    HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplying a caller-controlled host parameter to the ClickHouse proxy test endpoint with