CVE-2026-128986

Eclipse BaSyx Go Components versions up to and including 1.1.3 are vulnerable to an authorization bypass due to an interpretation conflict in how ABAC-enabled deployments handle URL encoding. The system matches ROUTE access rules against a fully decoded request path, but the router processes the ...