CVE-2026-57920: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/orgId endpoints...

Peplink InControl 2 CDM - (API) Persistent Vulnerability

Document Title: =============== Peplink InControl 2 CDM - API Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1841 Release Date: ============= 2016-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 184...