Vendor
Archon versions 0.2.13 through 0.11.1 contain a missing authentication vulnerability allowing unauthenticated, network-adjacent attackers to execute arbitrary commands via the /api/* control API.