CVE-2026-15704 CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components

🗓️ 24 Jul 2026 07:41:42Reported by GoogleType

osv🔗 osv.dev👁 2 Views

ABAC bypass in BaSyx Go Components due to trailing slash mismatch between middleware and router; fixed in v1.0.1.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-15704	24 Jul 202607:41	–	attackerkb
Circl	CVE-2026-15704	24 Jul 202608:26	–	circl
CVE	CVE-2026-15704	24 Jul 202607:41	–	cve
Cvelist	CVE-2026-15704 CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components	24 Jul 202607:41	–	cvelist
EUVD	EUVD-2026-48523	24 Jul 202607:41	–	euvd
NVD	CVE-2026-15704	24 Jul 202609:16	–	nvd
Positive Technologies	PT-2026-64256	24 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-15704 CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components	24 Jul 202607:41	–	vulnrichment

Source	Link
github	www.github.com/eclipse-basyx/basyx-go-components/releases/tag/v1.0.1
gitlab	www.gitlab.eclipse.org/security/cve-assignment/-/work_items/164
gitlab	www.gitlab.eclipse.org/security/vulnerability-reports/-/work_items/580
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15704.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-15704
github	www.github.com/eclipse-basyx/basyx-go-components/pull/442

27 Jul 2026 04:02Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.00353