Filtered by vendor Aip-pub Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-127278 1 Aip-pub 1 Acps-community 2026-11-13 7.3 High
A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed with the reason "completed". However, it was not possible to determine the PR or commit which could have fixed this issue.