CVE ID :CVE-2026-116634 Published : Oct. 26, 2026, 6:09 p.m. | 13 minutes ago Description :OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-116634 - OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens

VERWANDTEARTIKEL

CVE-2026-10757 - BUG-000187511 - ArcGIS Server has a security vulnerability.

CVE-2026-83519: Kritische Windows-Lücke in der Fehlerberichterstattung ermöglicht Codeausführung

CVE-2026-105608 - Consul vulnerable to an authorization bypass in service mesh registration

CVE-2026-71456 - Johnson Controls Kantech Entrapass Hard-coded Cryptographic Key Vulnerability

CVE-2026-115905 - zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

CVE-2026-115915 - vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE