CyberSecBulletin

Skyhook-io vulnerabilities

We track 1 vulnerability in Skyhook-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Skyhook-io vulnerabilities

  • 8.8 High severity

    radar: Missing Authorization

    CVE-2026-82026Skyhook-io

    Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check in