← Database

CVE-2026-63288

HIGH CVSS: 8.3 Published: 2026-11-10 Modified: 2026-11-10

Description

A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.

Affected Platforms

Unknown

Weakness Type

CWE-306

References