Description
A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AIP-PUB | ACPs-community | 2.0, 2.1, 2.2.0 | — |
References
- VDB-436435 | AIP-PUB ACPs-community Discovery Server main.py missing authentication vdb-entry
- VDB-436435 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-127279 | CVE Analysis and Report third-party-advisory
- Submit #1040952 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Missing Authentication third-party-advisory
- https://github.com/AIP-PUB/ACPs-community/issues/12 exploit issue-tracking
- https://github.com/AIP-PUB/ACPs-community/ product