Skip to content
Threat Feed
Subscribe

Product

Gerapy (< 0.9.14)

1 brief RSS
high advisory

CVE-2026-16209: Missing Authentication in Gerapy Project Upload Endpoint

A vulnerability (CVE-2026-16209) in Gerapy versions up to 0.9.13 allows remote unauthenticated access to the Project Upload Endpoint due to missing authentication, enabling attackers to manipulate files and potentially leading to data compromise, with public exploit details available.

Gerapy cve web-application authentication-bypass python
1t 1c 2i