CVE-2026-49819

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in pb.HandlerInitSuperuser backend/pb/handlers.go:249, reachable as POST /api/upsnap/init-superuser. The vulnerable code lacks any authentication, setup token, IP...

CVE-2026-49819

creationtimestamp| type| source ---|---|--- 2026-08-13 00:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/117085256775668473 2026-08-13 00:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mswdmgfufh2f 2026-08-13 00:30:04+00:00| seen|...

CVE-2026-49819

UpSnap (wake on LAN web app) versions 4.4.1–5.3.5 are vulnerable to an unauthenticated privilege-escalation chain in pb.HandlerInitSuperuser (backend/pb/handlers.go:249). The vulnerability is reachable via POST /api/upsnap/init-superuser and is gated only by a totalSuperusers > 0 check, with n...