CVE-2026-42202 — nova-toggle-5 enables fliping booleans in the index. Prior

title: CVE-2026-42202 - Unauthorized Boolean Toggling in Nova
id: scw-2026-05-08-ai-1
status: experimental
level: high
description: |
  Detects attempts to exploit CVE-2026-42202 by targeting the /nova-vendor/nova-toggle/toggle/ endpoint with a POST request. This rule specifically looks for the characteristic path and the presence of an attribute parameter, indicating an attempt to flip boolean values in the Nova index without proper authorization.
author: SCW Feed Engine (AI-generated)
date: 2026-05-08
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-42202/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-method:
          - 'POST'
      uri|contains:
          - '/nova-vendor/nova-toggle/toggle/'
      cs-uri-query|contains:
          - 'attribute=' # This is a placeholder, actual attribute name would be needed if known
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse