Advisories · Technology

sovity dataspace-portal.

Every CVE that names sovity dataspace-portal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42160 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend
- sovity dataspace-portal
- Broken access control
- CWE-602
Not analysed yet 8 May 2026