CVE-2026-107779

{
  "etk_id": "ETK-2026-1008",
  "cve_id": "CVE-2026-107779",
  "display_id": "CVE-2026-107779",
  "ghsa_id": "GHSA-2h33-hvx5-jq32",
  "euvd_id": "EUVD-2026-95257",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Missing authentication in Skyeye xxl-job-admin job endpoints",
  "summary": "Dromara Skyeye includes xxl-job-admin JobInfoController endpoints that do not require authentication. An unauthenticated remote attacker can create and start jobs that execute commands on an executor host, and can also stop or remove jobs.",
  "mitigation": "Immediately restrict access to xxl-job-admin and its job-management endpoints to authenticated, trusted administrators only; block public access to the affected routes at the reverse proxy or network layer. Monitor executor hosts and job records for unexpected job creation or changes, and apply an upstream update when a fixed release is published.",
  "vendor": "dromara",
  "product": "skyeye",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 003549ae5615bd114ba5bb8ddf6a8e8ead97c321"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "skyeye",
      "purl": null
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0054,
  "epss_percentile": 0.4456,
  "epss_asof": "2026-10-21",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 86.33157556666667,
  "t0_at": "2026-10-08T20:15:54.720000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-08T20:15:54.720000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-08T20:15:54.720000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107779"
    }
  }
}