CVE-2026-31985
CVE-2026-31985 is a high-severity vulnerability with a CVSS 3.x base score of 8.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-671.
Key facts
- Severity: High (CVSS 3.x base score 8.1)
- CVSS v4: 8.3
- EPSS exploit prediction: 0% (2nd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-671
- Published:
- Last modified:
Description
When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Remote Collector and the Guardian or CMC. This could result in theft of the sync token, impersonation of the server, injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC, or disruption of the data flow between the Remote Collector and the Guardian or CMC.
Frequently asked questions
- What is CVE-2026-31985?
- When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Remote Collector and the Guardian or CMC. This could result in theft of the sync token, impersonation of the server, injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC, or disruption of the data flow between the Remote Collector and the Guardian or CMC.
- How severe is CVE-2026-31985?
- CVE-2026-31985 has a CVSS 3.x base score of 8.1, rated high severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity high, and availability low.
- Is CVE-2026-31985 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (2nd percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-31985?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2026-31985 published?
- CVE-2026-31985 was published on 2026-07-09.
References
Other CWE-671 vulnerabilities
- CVE-2025-24024 — Critical (CVSS 9.1): Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member…
- CVE-2018-13283 — High (CVSS 8.8): Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226…
- CVE-2023-20115 — Medium (CVSS 5.4): A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in…
- CVE-2022-29163 — Low (CVSS 3.5): Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions…