CVE-2026-49819

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in "pb.HandlerInitSuperuser" "backend/pb/handlers.go:249", reachable as "POST /api/upsnap/init-superuser". The vulnerable code lacks any authentication, setup toke...