Ferry - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ferry/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 13 Nov 2026 02:45:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svglanyulei ferry: Improper authentication in JWT validation (CVE-2026-127281)https://feed.craftedsignal.io/briefs/2026-11-ferry-auth-bypass-cve-2026-127281/Fri, 13 Nov 2026 02:45:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ferry-auth-bypass-cve-2026-127281/The lanyulei ferry application versions 1.0.0-beta.1 and 1.0.0 contain a vulnerability in the JWT validation middleware that allows remote, unauthenticated attackers to bypass authentication.A remote authentication bypass vulnerability (CVE-2026-127281) has been identified in the lanyulei ferry application, specifically within the JWT validation middleware located at middleware/auth.go. The vulnerability affects versions 1.0.0-beta.1 and 1.0.0. While the vendor was contacted, they did not respond to the disclosure. Public exploit code for this vulnerability has been made available.

Impact

Successful exploitation allows a remote attacker to bypass authentication. The CVSS 3.1 base score is 7.3.

]]>highadvisory