CVE-2026-127278

The software AIP-PUB ACPs-community (up to version 2.2.0 ) is vulnerable to improper authentication within the verify-code Endpoint . Specifically, a manipulation of the phone argument in the send_verification_code function located in registry-server/app/account/service_auth.py allows for remote ...

CVE-2026-127278 AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function sendverificationcode of the file registry-server/app/account/serviceauth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper...