CVE-2026-11807 - Eda-server: websocket missing authorization allows credential theft via activation_id spoofing
CVE ID :CVE-2026-11807 Published : June 23, 2026, 7:40 p.m. | 1 hour, 30 minutes ago Description :A missing authorization vulnerability was found in the Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker...