CVE-2026-65311 – Missing authentication for logging-configuration endpoint

CVE ID :CVE-2026-65311

Published : July 31, 2026, 9:16 a.m. | 29 minutes ago

Description :The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA)
in affected versions exposes an undocumented endpoint that changes
the server’s logging level and target without requiring
authentication. A remote, unauthenticated attacker with network
access to the service may suppress audit logging, potentially
concealing other activity on the system.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…