CVE-2026-75627

creationtimestamp| type| source ---|---|--- 2026-08-18 12:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte65l3kej2p 2026-08-18 12:07:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mte6kjzkkr2y...

CVE-2026-75627

Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager...