Search
Find a vulnerability
Search criteria
4 vulnerabilities by AIP-PUB
CVE-2026-127279 (GCVE-0-2026-127279)
Vulnerability from nvd – Published: 2026-11-13 01:00 – Updated: 2026-11-13 22:31
VLAI
EPSS
VEX
Title
AIP-PUB ACPs-community Discovery Server main.py missing authentication
Summary
A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-13 16:54 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436435 | vdb-entry |
| https://vuldb.com/vuln/436435/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127279 | third-party-advisory |
| https://vuldb.com/submit/1040952 | third-party-advisory |
| https://github.com/AIP-PUB/ACPs-community/issues/12 | exploitissue-tracking |
| https://github.com/AIP-PUB/ACPs-community/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| AIP-PUB | ACPs-community |
Affected:
2.0
Affected: 2.1 Affected: 2.2.0 cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-127279",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-13T16:54:10.653318Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T22:31:56.354Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:*"
],
"modules": [
"Discovery Server"
],
"product": "ACPs-community",
"vendor": "AIP-PUB",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Evo1ution (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T01:00:25.095Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436435 | AIP-PUB ACPs-community Discovery Server main.py missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/436435"
},
{
"name": "VDB-436435 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436435/cti"
},
{
"name": "CVE-2026-127279 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127279"
},
{
"name": "Submit #1040952 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1040952"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/AIP-PUB/ACPs-community/issues/12"
},
{
"tags": [
"product"
],
"url": "https://github.com/AIP-PUB/ACPs-community/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:34:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "AIP-PUB ACPs-community Discovery Server main.py missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127279",
"datePublished": "2026-11-13T01:00:25.095Z",
"dateReserved": "2026-11-12T17:29:13.876Z",
"dateUpdated": "2026-11-13T22:31:56.354Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-127278 (GCVE-0-2026-127278)
Vulnerability from nvd – Published: 2026-11-13 00:45 – Updated: 2026-11-13 00:45
VLAI
EPSS
VEX
Title
AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication
Summary
A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.
Severity
CWE
- CWE-287 - Improper Authentication
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436433 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/436433/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127278 | third-party-advisory |
| https://vuldb.com/submit/1040948 | third-party-advisory |
| https://github.com/AIP-PUB/ACPs-community/issues/11 | exploitissue-tracking |
| https://github.com/AIP-PUB/ACPs-community/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| AIP-PUB | ACPs-community |
Affected:
2.0
Affected: 2.1 Affected: 2.2.0 cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:*"
],
"modules": [
"verify-code Endpoint"
],
"product": "ACPs-community",
"vendor": "AIP-PUB",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Evo1ution (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the reason \"completed\". However, it was not possible to determine the PR or commit which could have fixed this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T00:45:27.925Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436433 | AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/436433"
},
{
"name": "VDB-436433 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436433/cti"
},
{
"name": "CVE-2026-127278 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127278"
},
{
"name": "Submit #1040948 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Improper Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1040948"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/AIP-PUB/ACPs-community/issues/11"
},
{
"tags": [
"product"
],
"url": "https://github.com/AIP-PUB/ACPs-community/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:34:19.000Z",
"value": "VulDB entry last update"
}
],
"title": "AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127278",
"datePublished": "2026-11-13T00:45:27.925Z",
"dateReserved": "2026-11-12T17:29:10.070Z",
"dateUpdated": "2026-11-13T00:45:27.925Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-127279 (GCVE-0-2026-127279)
Vulnerability from cvelistv5 – Published: 2026-11-13 01:00 – Updated: 2026-11-13 22:31
VLAI
EPSS
VEX
Title
AIP-PUB ACPs-community Discovery Server main.py missing authentication
Summary
A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-13 16:54 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436435 | vdb-entry |
| https://vuldb.com/vuln/436435/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127279 | third-party-advisory |
| https://vuldb.com/submit/1040952 | third-party-advisory |
| https://github.com/AIP-PUB/ACPs-community/issues/12 | exploitissue-tracking |
| https://github.com/AIP-PUB/ACPs-community/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| AIP-PUB | ACPs-community |
Affected:
2.0
Affected: 2.1 Affected: 2.2.0 cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-127279",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-13T16:54:10.653318Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T22:31:56.354Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:*"
],
"modules": [
"Discovery Server"
],
"product": "ACPs-community",
"vendor": "AIP-PUB",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Evo1ution (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T01:00:25.095Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436435 | AIP-PUB ACPs-community Discovery Server main.py missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/436435"
},
{
"name": "VDB-436435 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436435/cti"
},
{
"name": "CVE-2026-127279 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127279"
},
{
"name": "Submit #1040952 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1040952"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/AIP-PUB/ACPs-community/issues/12"
},
{
"tags": [
"product"
],
"url": "https://github.com/AIP-PUB/ACPs-community/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:34:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "AIP-PUB ACPs-community Discovery Server main.py missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127279",
"datePublished": "2026-11-13T01:00:25.095Z",
"dateReserved": "2026-11-12T17:29:13.876Z",
"dateUpdated": "2026-11-13T22:31:56.354Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-127278 (GCVE-0-2026-127278)
Vulnerability from cvelistv5 – Published: 2026-11-13 00:45 – Updated: 2026-11-13 00:45
VLAI
EPSS
VEX
Title
AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication
Summary
A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.
Severity
CWE
- CWE-287 - Improper Authentication
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/436433 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/436433/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-127278 | third-party-advisory |
| https://vuldb.com/submit/1040948 | third-party-advisory |
| https://github.com/AIP-PUB/ACPs-community/issues/11 | exploitissue-tracking |
| https://github.com/AIP-PUB/ACPs-community/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| AIP-PUB | ACPs-community |
Affected:
2.0
Affected: 2.1 Affected: 2.2.0 cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aip-pub:acps-community:*:*:*:*:*:*:*:*"
],
"modules": [
"verify-code Endpoint"
],
"product": "ACPs-community",
"vendor": "AIP-PUB",
"versions": [
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Evo1ution (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the reason \"completed\". However, it was not possible to determine the PR or commit which could have fixed this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T00:45:27.925Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-436433 | AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/436433"
},
{
"name": "VDB-436433 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/436433/cti"
},
{
"name": "CVE-2026-127278 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-127278"
},
{
"name": "Submit #1040948 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Improper Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1040948"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/AIP-PUB/ACPs-community/issues/11"
},
{
"tags": [
"product"
],
"url": "https://github.com/AIP-PUB/ACPs-community/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-12T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-12T18:34:19.000Z",
"value": "VulDB entry last update"
}
],
"title": "AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-127278",
"datePublished": "2026-11-13T00:45:27.925Z",
"dateReserved": "2026-11-12T17:29:10.070Z",
"dateUpdated": "2026-11-13T00:45:27.925Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}