TencentCloud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH TencentCloud CVE published 2026-10-10

CVE-2026-108581

CVE-2026-108581 is a high-severity vulnerability in TencentCloud Octop that allows authenticated low-privileged users to read stored provider API keys. The vulnerability has a CVSS score of 7.1 and is classified as CWE-862, Missing Authorization. This vulnerability can lead to abuse of upstream provider accounts. Defenders should assess their exposure and restrict access to sensitive information. The vuln [truncated]