CVE-2026-123033

A flaw was found in middlewared. An unauthenticated attacker on the same local network segment can bypass authentication by establishing a connection matching high-availability HA heartbeat attributes. This improper origin check grants administrative API access, enabling the attacker to execute...