https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 13:40:12 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-89309 <p>The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required.</p> <p>The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.</p> <p>The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required.</p> <p>The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-89309 https://vulnerability.circl.lu/vuln/ghsa-7chg-cp4g-f4v9 <p>Vulnerability in tbc.</p> <p>This issue affects tbc: before 1.</p> <p>Vulnerability in tbc.</p> <p>This issue affects tbc: before 1.</p> https://vulnerability.circl.lu/vuln/ghsa-7chg-cp4g-f4v9