CVE-2026-16081: Cross-Site Request Forgery (CSRF)

A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown function of the file web/backend/api/auth.go. Executing a manipulation can lead to cross-site request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2023-28609: Improper Authentication

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication...