CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in pb.HandlerInitSuperuser backend/pb/handlers.go:249, reachable as POST /api/upsnap/init-superuser. The vulnerable code lacks any authentication, setup token, IP...

CVE-2026-49819

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in "pb.HandlerInitSuperuser" "backend/pb/handlers.go:249", reachable as "POST /api/upsnap/init-superuser". The vulnerable code lacks any authentication, setup toke...