skyhook-io CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH skyhook-io CVE published 2026-10-14

CVE-2026-82026

CVE-2026-82026 Radar Missing Authorization via /api/local-terminal. The vulnerability allows attackers to spawn a privileged shell by relying on a runtime-mode check instead of role-based access control, achieving remote code execution with Radar's privileges. This impacts Radar administrators and users, security teams responsible for monitoring and patching Radar instances. The vulnerability's impact req [truncated]