1 matches found
CVE-2026-71262: Missing Authentication for Critical Function
IoTSharp BlobStorageController.cs lacks the Authorize attribute applied to every other controller in the application DevicesController, CustomersController, TenantsController, etc., and no global authorization FallbackPolicy is configured in Startup.cs, leaving its...
9.8CVSS5.9AI score0.0063EPSS
SaveExploits0References2
20