CVE-2026-129129

AiSOC versions 12.1.0 before 23.3.0 are vulnerable to a missing authentication flaw in the Next.js console rewrite routes. This allows unauthenticated attackers to query the enrichment service via the /api/v1/enrichment/lookup or /api/v1/enrichment/bulk endpoints. Impact includes the unauthorized...

EUVD-2026-125550

AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve...

CVE-2026-129129 AiSOC 12.1.0 before 23.3.0 Missing Authentication via Enrichment Console Proxy Routes

AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve...

PT-2026-146987

AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to query the enrichment service through Next.js console rewrite routes. Attackers can send requests to /api/v1/enrichment/lookup or /api/v1/enrichment/bulk to retrieve...