STACKIT vulnerabilities
We track 1 vulnerability in STACKIT products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest STACKIT vulnerabilities
- 8.8 High severity
IaaS API: Missing Authorization
STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated, low-privileged attacker can attach an arbitrary service account to a virtual machine they control without validation of their permission to