{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/cervantes-v1.3-beta/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:cervantes:cervantes:1.3:beta:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-115975"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Cervantes (v1.3-beta)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Cervantes"],"content_html":"\u003cp\u003eCervantes version v1.3-beta is affected by a broken access control vulnerability in the JiraController component, tracked as CVE-2026-115975. This flaw permits an authenticated user to perform unauthorized actions including creating, editing, or deleting Jira tickets related to vulnerabilities in projects outside their assigned scope.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthorized modification of project data, which can compromise the integrity of vulnerability management workflows and lead to project-wide interference.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all instances of Cervantes v1.3-beta within the environment. If identified, restrict access to the JiraController component or upgrade to a patched version once provided by the vendor.\u003c/p\u003e\n","date_modified":"2026-10-24T10:12:51Z","date_published":"2026-10-24T10:12:51Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cervantes-jira-access-control/","summary":"Cervantes version v1.3-beta contains a broken access control vulnerability in the JiraController component allowing unauthorized manipulation of Jira tickets across projects.","title":"Cervantes: Broken access control in JiraController (CVE-2026-115975)","url":"https://feed.craftedsignal.io/briefs/2026-10-cervantes-jira-access-control/"}],"language":"en","title":"CraftedSignal Threat Feed - Cervantes (V1.3-Beta)","version":"https://jsonfeed.org/version/1.1"}