PT-2026-102440

A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsense backend/app/routes/circleback webhook route.py of the component circleback Endpoint. Executing a manipulation can lead to missing authentication. The attack can be...