CVE-2026-25555

creationtimestamp| type| source ---|---|--- 2026-06-08 19:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsgrf6fel23 2026-06-16 03:30:23+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-25555.yaml 2026-06-22...

CVE-2026-25555

OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. Attackers can exploit the middleware's comparison of the supplied...