{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amakunetmaku-boot4.3.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:makunet:maku-boot:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:makunet:maku-boot:5.0.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-110123"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["maku-boot (4.3.0 through 5.0.0)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","web-application","cve"],"_cs_type":"advisory","_cs_vendors":["Makunet"],"content_html":"\u003cp\u003eMakunet maku-boot versions 4.3.0 through 5.0.0 contain a critical missing authorization vulnerability. The application fails to perform necessary authority checks on specific system configuration endpoints, specifically '/sys/mail/config/list' and '/sys/sms/config/list'. This oversight allows any authenticated user to interact with these sensitive API routes.\u003c/p\u003e\n\u003cp\u003eBy exploiting this flaw, an attacker can retrieve unmasked SMTP credentials and administrative access keys for major cloud service providers including Aliyun, Tencent Cloud, Qiniu, and Huawei Cloud. Furthermore, the vulnerability allows unauthorized access to the '/sys/mail/config/send' endpoint, which can be manipulated to trigger outbound mail to arbitrary recipients. This represents a significant risk for credential theft, lateral movement via cloud service abuse, and the facilitation of phishing or spam campaigns originating from the compromised host's mail infrastructure.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability poses a high risk to organizations utilizing maku-boot, specifically regarding the exposure of cloud service provider access keys and internal email infrastructure. Successful exploitation allows for the exfiltration of sensitive configuration data, enabling further compromise of associated cloud environments and the potential for mass unauthorized messaging. No specific victim counts have been reported, but the broad scope of affected cloud providers significantly increases the blast radius for affected enterprise users.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade Makunet maku-boot to a version addressing this missing authorization vulnerability.\u003c/li\u003e\n\u003cli\u003eAudit access logs for any requests directed to '/sys/mail/config/' or '/sys/sms/config/' endpoints to identify potential unauthorized reconnaissance or exploitation attempts.\u003c/li\u003e\n\u003cli\u003eRotate all SMTP credentials and cloud access keys (Aliyun, Tencent Cloud, Qiniu, Huawei Cloud) that were stored within the maku-boot configuration.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the application management interface to trusted administrative subnets only.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T18:37:52Z","date_published":"2026-10-13T18:37:52Z","id":"https://feed.craftedsignal.io/briefs/2026-10-makunet-maku-boot-auth-bypass/","summary":"Makunet maku-boot versions 4.3.0 through 5.0.0 suffer from a missing authorization vulnerability, enabling authenticated users to exfiltrate cloud service credentials and send unauthorized emails.","title":"Missing Authorization in Makunet maku-boot Configuration Endpoints","url":"https://feed.craftedsignal.io/briefs/2026-10-makunet-maku-boot-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:makunet:maku-Boot:4.3.0:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}