PT-2026-47630 · Dtstack · Taier

Anch0R · CVE-2026-11618 · Published 2026-06-09 · Updated 2026-06-09

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DTStack Taier versions prior to 1.4.0

Description An issue in the Source Connection Test Endpoint allows remote attackers to perform manipulations leading to improper authentication. The flaw exists within the preHandle() function located in the taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java file.

Recommendations Apply patch f95389e7f74acec42bcee079a616aaa06f9551d2 to versions prior to 1.4.0.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-11618

Affected Products

Taier

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11618.json · Exploit
• 🔥 https://github.com/DTStack/Taier/issues/1194 · Exploit
• https://github.com/DTStack/Taier/commit/f95389e7f74acec42bcee079a616aaa06f9551d2 · Patch
• https://osv.dev/vulnerability/CVE-2026-11618 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11618 · Security Note
• https://vuldb.com/vuln/369299/cti · Note
• https://t.me/cveNotify/166640 · Telegram Post
• https://github.com/DTStack/Taier · Note
• https://vuldb.com/cve/CVE-2026-11618 · Note
• https://vuldb.com/vuln/369299 · Note
• https://vuldb.com/submit/834008 · Note