Skip to content
OpenAdvisories

Vendor

yolanmees

1 known vulnerabilities.

Products

Spikster 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-67594

    Spikster Missing Authentication via API Route Group

    Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the A…

    yolanmees Spikster