CVE-2026-49994 - Bluehood: Missing authentication on Bluehood API routes when web auth is enabled
CVE ID :CVE-2026-49994 Published : Sept. 28, 2026, 6:17 p.m. | 1 hour, 58 minutes ago Description :Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/* handlers (settings,...