CVE-2026-65655
Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy
CVSS score
2.3
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.0
CVE-2026-108126
temporal-proxy payload decryption is not bound to the request namespace
TT
Patch verified
8.7
CVE-2026-65653
temporalio/tchannel-go zero-chunk call fragment causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65652
temporalio/tchannel-go malformed checksum type causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65651
temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
TT
Patch verifiedEPSS %1
7.2
CVE-2026-87858
Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization
TT
Patch verifiedEPSS %1
8.7
CVE-2026-89139
Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host
TT
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-65655"