CVE-2024-36535

9.8 criticalEPSS 0.5%

Critical (9.8) in layer5 meshery. EPSS 0.5% chance of exploitation in the next 30 days.

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-07-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19