medium
advisory
Aspire: Security feature bypass vulnerability (CVE-2026-118740)
CVE-2026-118740 is a missing authorization vulnerability in Aspire that allows an unauthorized attacker to bypass a security feature over a network.
CVE search metadata
CVE search record: CVE-2026-118740. Severity: critical. CVSS: 9.1. KEV: no. Product: Aspire. Brief: Aspire: Security feature bypass vulnerability (CVE-2026-118740). Brief link: https://feed.craftedsignal.io/briefs/2026-11-aspire-security-bypass-cve-2026-118740/
Triage facts
Revision 1- Applicability
- Aspire
- Evidence
- Unknown
- Severity
- Medium
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 11:51 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.