{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dataminer-brokergateway--10.6.9-cu1--10.6.0-cu7--10.5.0-cu19--10.4.0-cu22/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:skyline:dataminer_brokergateway:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-89017"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DataMiner BrokerGateway (\u003c 10.6.9 CU1, \u003c 10.6.0 CU7, \u003c 10.5.0 CU19, \u003c 10.4.0 CU22)"],"_cs_severities":["high"],"_cs_tags":["cve-2026-89017","network","nats","credential-exposure"],"_cs_type":"advisory","_cs_vendors":["Skyline"],"content_html":"\u003cp\u003eSkyline DataMiner BrokerGateway versions prior to 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22 contain a vulnerability where an embedded API key is retrievable by unauthenticated attackers even when the pairing mode is disabled. Successful exploitation enables an attacker to retrieve the DataMinerUser.creds NATS credentials and gain unauthorized, trusted access to the message-bus via TCP port 4222.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eUnauthorized actors can obtain trusted message-bus access to the DataMiner system without prior credentials, potentially allowing for the interception or injection of system messages.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePatch DataMiner systems to the fixed versions immediately: 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, or 10.4.0 CU22. Inventory all internet-facing instances of DataMiner BrokerGateway and restrict network access to the NATS message-bus port 4222 to trusted internal segments only.\u003c/p\u003e\n","date_modified":"2026-11-06T19:23:35Z","date_published":"2026-11-06T19:23:35Z","id":"https://feed.craftedsignal.io/briefs/2026-11-skylinedataminer-brokergateway-vuln/","summary":"An unauthenticated API key vulnerability in Skyline DataMiner BrokerGateway allows attackers to retrieve internal keys and NATS credentials to gain unauthorized message-bus access via TCP port 4222.","title":"Skyline DataMiner BrokerGateway embedded API key exposure (CVE-2026-89017)","url":"https://feed.craftedsignal.io/briefs/2026-11-skylinedataminer-brokergateway-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - DataMiner BrokerGateway (\u003c 10.6.9 CU1, \u003c 10.6.0 CU7, \u003c 10.5.0 CU19, \u003c 10.4.0 CU22)","version":"https://jsonfeed.org/version/1.1"}