CVE-2026-108549: Missing Authentication in MAX Webhook
ID: 706f14f3-d616-5ff9-b035-e2ad238aed7c
STIX ID: report--706f14f3-d616-5ff9-b035-e2ad238aed7c
Feed Name: ThreatCluster
Threat Score
cc-connect (≤1.5.0) contains a missing authentication vulnerability in the MAX platform adapter webhook mode (platform/max/max.go) that can allow webhook sender spoofing; the issue is referenced on GitHub, vulncheck, and Redpacketsecurity and appears tracked as CVE-2026-108549. Administrators should verify webhook_secret configuration, assess exposure, and apply updates or mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.