CVE-2026-56782-Gorse-Auth-Bypass

CVE-2026-56782 — Gorse Unauthenticated Database Dump / Restore Auth Bypass Gorse 0.5.10 ships with adminapikey = "". The master HTTP endpoints /api/dump and /api/restore are gated by an admin check that fails open when no key is configured — the default. An unauthenticated, network-reachable...