Loading the current evidence view. Navigation and account controls remain available.
Indicator investigation
Loading the current evidence view. Navigation and account controls remain available.
Loading verdict, provenance, relationships and sightings.
Indicator
Type cve · source NVD CVE
Grouped attempts with latest status; expand for attempt history.
1 attempt · first 2026-09-05T12:41:37.650739Z · last 2026-09-05T12:41:37.650739Z
Not listed in CISA KEV (local)
Types: cisa_kev
1 attempt · first 2026-09-05T12:41:37.654110Z · last 2026-09-05T12:41:37.654110Z
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. Authenticated attackers can post comments to arbitrary issues across workspaces by supplying an issue_id parameter to the public deploy-board comment endpoint. · CWEs: CWE-639
Types: nvd_local
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
Full investigation canvas with neighbor expansion.