CyberSecBulletin

Internet2 vulnerabilities

We track 2 vulnerabilities in Internet2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.

2vulnerabilities
2critical
0high
0exploited
9.2average CVSS score

Latest Internet2 vulnerabilities

  • 9.3 Critical severity

    Grouper: Incorrect Privilege Assignment

    CVE-2026-103470Internet2

    In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

  • 9.1 Critical severity

    grouper: Weak Authentication

    CVE-2024-39848Internet2

    Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This