Approved changes feed: RSS · Atom
cpe:2.3:a:yolanmees:spikster:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Yolanmees (126ec896-9c46-513a-a6c3-10b710fb1214) |
|---|---|
| Product | Spikster (83858528-497e-5d3f-ac57-381cc02b1b62) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-67594 |
vulnerable | 2026-09-16 04:33:05.831173 |
Spikster Missing Authentication via API Route Group
CRITICAL (9.8)
Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers can invoke approximately 50 unprotected API endpoints to enumerate and provision servers, reset root passwords, read and write arbitrary files on the host, and create database users.
Published: 2026-07-30T19:14:27.970Z
Updated: 2026-07-31T15:59:16.523Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.