ACPs-Community - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/acps-community/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 13 Nov 2026 02:45:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAIP-PUB ACPs-community: Missing authentication in Discovery Server (CVE-2026-127279)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-127279/Fri, 13 Nov 2026 02:45:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-127279/A vulnerability in the Discovery Server component of AIP-PUB ACPs-community up to version 2.2.0 allows remote attackers to bypass authentication due to a flaw in discovery-server/app/main.py.<p>A vulnerability identified as CVE-2026-127279 exists in the Discovery Server component of AIP-PUB ACPs-community versions up to 2.2.0. The flaw resides within the discovery-server/app/main.py file and results in missing authentication, which may be exploited by remote attackers. The exploit is public.</p> highadvisoryAIP-PUB ACPs-community: Improper Authentication in verify-code Endpoint (CVE-2026-127278)https://feed.craftedsignal.io/briefs/2026-11-acps-community-auth-bypass-cve-2026-127278/Fri, 13 Nov 2026 02:45:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-acps-community-auth-bypass-cve-2026-127278/AIP-PUB ACPs-community up to 2.2.0 contains an improper authentication vulnerability in the send_verification_code function that can be triggered remotely via manipulation of the phone argument.A vulnerability (CVE-2026-127278) has been identified in the AIP-PUB ACPs-community component in versions up to 2.2.0. The vulnerability exists within the 'send_verification_code' function in 'registry-server/app/account/service_auth.py'. The verify-code endpoint can be exploited remotely by manipulating the 'phone' argument, resulting in improper authentication. The exploit code has been made available to the public. While a related GitHub issue was closed as 'completed', there is no identified commit or pull request confirming a fix.

Impact

Successful exploitation results in improper authentication.

Recommendation

Monitor the environment for the identified vulnerable component and assess exposure to the verify-code endpoint.

]]>highadvisory