The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project (including database passwords, API keys, etc.) by sending a TCP request without any credential.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 27 Aug 2026 00:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unprotected Netty Configuration Service Exposes Project Settings |
Wed, 26 Aug 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project (including database passwords, API keys, etc.) by sending a TCP request without any credential. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-26T21:42:34.182Z
Reserved: 2026-08-17T00:00:00.000Z
Link: CVE-2026-75329
No data.
Status : Received
Published: 2026-08-26T22:16:29.087
Modified: 2026-08-26T22:16:29.087
Link: CVE-2026-75329
No data.
OpenCVE Enrichment
Updated: 2026-08-26T23:45:03Z
Weaknesses
No weakness.