CVE-2026-68548

The Algernon pure-Go web server is vulnerable to an unauthenticated authorization bypass in versions prior to 1.17.10 . The flaw exists because the software uses case-sensitive string matching for protected prefixes (e.g., /admin, /repo, /data) while resolving the raw request path against a case-...