Cve-2026-89017 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-89017/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 19:23:35 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSkyline DataMiner BrokerGateway embedded API key exposure (CVE-2026-89017)https://feed.craftedsignal.io/briefs/2026-11-skylinedataminer-brokergateway-vuln/Fri, 06 Nov 2026 19:23:35 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-skylinedataminer-brokergateway-vuln/An unauthenticated API key vulnerability in Skyline DataMiner BrokerGateway allows attackers to retrieve internal keys and NATS credentials to gain unauthorized message-bus access via TCP port 4222.Skyline DataMiner BrokerGateway versions prior to 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22 contain a vulnerability where an embedded API key is retrievable by unauthenticated attackers even when the pairing mode is disabled. Successful exploitation enables an attacker to retrieve the DataMinerUser.creds NATS credentials and gain unauthorized, trusted access to the message-bus via TCP port 4222.

Impact

Unauthorized actors can obtain trusted message-bus access to the DataMiner system without prior credentials, potentially allowing for the interception or injection of system messages.

Recommendation

Patch DataMiner systems to the fixed versions immediately: 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, or 10.4.0 CU22. Inventory all internet-facing instances of DataMiner BrokerGateway and restrict network access to the NATS message-bus port 4222 to trusted internal segments only.

]]>highadvisorycve-2026-89017networknatscredential-exposure