Lucene search
+L

14 matches found

osv-pysec
osv-pysec
•added 2026/10/01 4:38 p.m.•20 views

PYSEC-2026-4163 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

Summary The AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call this endpoint and trigger execution of the emailreader.py subprocess, which connects to configured ProtonMail or Gmail...

7.5CVSS6.3AI score0.00572EPSS
SaveExploits0References9
PyPA
PyPA
•added 2026/10/01 4:38 p.m.•19 views

SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

SummaryThe AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call this endpoint and trigger execution of the emailreader.py subprocess, which connects to configured ProtonMail or Gmail...

7.5CVSS6.3AI score0.00572EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•15 views

PT-2026-105907

Summary The AetherBrowser API server scripts/aetherbrowser/api server.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call this endpoint and trigger execution of the email reader.py subprocess, which connects to configured ProtonMail or Gmail...

7.5CVSS6.4AI score0.00572EPSS
SaveExploits0References10
osv-ghsa
osv-ghsa
•added 2026/09/25 9:48 p.m.•14 views

GHSA-Q986-4X7X-GX39 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

Summary The AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call this endpoint and trigger execution of the emailreader.py subprocess, which connects to configured ProtonMail or Gmail...

7.5CVSS6.4AI score0.00572EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/09/25 9:48 p.m.•23 views

SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

Summary The AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call this endpoint and trigger execution of the emailreader.py subprocess, which connects to configured ProtonMail or Gmail...

7.5CVSS6.4AI score0.00572EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2026/09/25 9:17 p.m.•31 views

CVE-2026-57443

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS0.00572EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/25 8:37 p.m.•37 views

CVE-2026-57443

The SCBE-AETHERMOORE geometric AI governance framework is vulnerable to CWE-306 (Missing Authentication for Critical Function) in versions 4.0.2 through 4.2.0 . The AetherBrowser API server (scripts/aetherbrowser/api_server.py) exposes the POST /api/ops/check-email endpoint without any authentica...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 8:37 p.m.•20 views

EUVD-2026-87356

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/25 8:37 p.m.•9 views

CVE-2026-57443 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/25 8:37 p.m.•7 views

CVE-2026-57443

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server "scripts/aetherbrowser/apiserver.py" exposes the "POST /api/ops/check-email" endpoint without any authentication. Any remote attacker can call...

8.7CVSS6.1AI score0.00572EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/25 8:37 p.m.•39 views

CVE-2026-57443 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS0.00572EPSS
SaveExploits0References3
osv-cve
osv-cve
•added 2026/09/25 8:37 p.m.•19 views

CVE-2026-57443 SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•10 views

PT-2026-99120

Name of the Vulnerable Software and Affected Versions SCBE-AETHERMOORE versions 4.0.2 through 4.2.0 Description The AetherBrowser API server scripts/aetherbrowser/api server.py exposes the POST /api/ops/check-email endpoint without authentication. A remote attacker can call this endpoint to trigg...

7.5CVSS6AI score0.00572EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•16 views

CVE-2026-57443: Missing Authentication for Critical Function

SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server scripts/aetherbrowser/apiserver.py exposes the POST /api/ops/check-email endpoint without any authentication. Any remote attacker can call thi...

7.5CVSS6.1AI score0.00572EPSS
SaveExploits0References2
Rows per page
Query Builder