What is CVE-2026-47768?

CVE-2026-47768 is a medium-severity vulnerability in Juev Nebula-mesh, classified under CWE-598. CVSS score: 5.5/10. Published 2026-07-28.

How severe is CVE-2026-47768?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Juev Nebula-mesh

CVE-2026-47768

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs). This issue has been patched in version…

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Juev Nebula-mesh — versions < 0.3.2

Weakness classification (CWE)

CWE-598

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-47768?: CVE-2026-47768 is a medium-severity vulnerability in Juev Nebula-mesh, classified under CWE-598. CVSS score: 5.5/10. Published 2026-07-28.
How severe is CVE-2026-47768?: Medium severity. CVSS v3 base score is 5.5 out of 10.