DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by mitre