Skip to content
Threat Feed
Subscribe

Product

ACPs-Community

2 briefs RSS
high advisory

AIP-PUB ACPs-community: Missing authentication in Discovery Server (CVE-2026-127279)

A vulnerability in the Discovery Server component of AIP-PUB ACPs-community up to version 2.2.0 allows remote attackers to bypass authentication due to a flaw in discovery-server/app/main.py.

ACPs-community
1c
high advisory

AIP-PUB ACPs-community: Improper Authentication in verify-code Endpoint (CVE-2026-127278)

AIP-PUB ACPs-community up to 2.2.0 contains an improper authentication vulnerability in the send_verification_code function that can be triggered remotely via manipulation of the phone argument.

PoC ACPs-community
1c