CVE-2026-75108
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can retrieve asset information or trigger wake-on-LAN packets on unauthorized assets.
Risk Assessment
Risk of unauthorized access to asset information and potential disruption of hardware via wake-on-LAN.
Recommendation
Implement per-asset access controls for these endpoints.
Original NVD description (English source)
Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they are not granted access to. Attackers can call these endpoints with arbitrary asset identifiers to retrieve asset information including display names, reachability status, connection timing, and network addresses, or trigger wake-on-LAN packets on unauthorized assets.