Authorization Bypass

🗓️ 03 May 2026 01:35:11Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

Grpc vulnerability allows authorization bypass via malformed HTTP2 path in google.golang.org/grpc.

Reporter	Title	Published	Views	Family All 1102
FreeBSD	traefik -- Multiple vulnerabilities	26 Mar 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in google.golang.org/grpc-v1.62.0	28 Apr 202621:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	27 Apr 202613:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container backup and restore is vulnerable to authorization bypass (CVE-2026-33186)	7 May 202613:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes May 2026	29 May 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Remediator is affected by multiple vulnerabilities	5 May 202615:14	–	ibm
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 2.0.0	20 Apr 202609:57	–	ibm
GithubExploit	Exploit for CVE-2026-33186	6 Apr 202617:33	–	githubexploit
ATTACKERKB	CVE-2026-33186	20 Mar 202622:23	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1534)	13 Apr 202600:00	–	nessus

Vulners

Node

rclone rcloneMatch1.58.1-r0go

AND

rclone rcloneMatch1.59.1-r1go

AND

rclone rcloneMatch1.63.1-r1go

AND

rclone rcloneMatch1.66.0-r0go

AND

rclone rcloneMatch1.59.0-r2go

AND

rclone rcloneMatch1.58.0-r1go

AND

rclone rcloneMatch1.57.0-r2go

AND

rclone rcloneMatch1.72.1-r1go

AND

rclone rcloneMatch1.56.2-r0go

AND

rclone rcloneMatch1.59.2-r2go

AND

rclone rcloneMatch1.61.1-r1go

AND

rclone rcloneMatch1.70.3-r1go

AND

rclone rcloneMatch1.59.0-r1go

AND

rclone rcloneMatch1.69.3-r0go

AND

rclone rcloneMatch1.63.1-r3go

AND

rclone rcloneMatch1.63.1-r0go

AND

rclone rcloneMatch1.71.0-r1go

AND

rclone rcloneMatch1.59.1-r0go

AND

rclone rcloneMatch1.72.1-r2go

AND

rclone rcloneMatch1.58.1-r1go

AND

rclone rcloneMatch1.68.2-r0go

AND

rclone rcloneMatch1.59.2-r0go

AND

rclone rcloneMatch1.60.1-r0go

AND

rclone rcloneMatch1.58.0-r3go

AND

rclone rcloneMatch1.70.3-r0go

AND

rclone rcloneMatch1.60.0-r1go

AND

rclone rcloneMatch1.62.2-r0go

AND

rclone rcloneMatch1.61.1-r0go

AND

rclone rcloneMatch1.69.0-r1go

AND

rclone rcloneMatch1.63.0-r1go

AND

rclone rcloneMatch1.66.0-r2go

AND

rclone rcloneMatch1.65.2-r1go

AND

rclone rcloneMatch1.71.0-r3go

AND

rclone rcloneMatch1.62.2-r1go

AND

rclone rcloneMatch1.69.0-r2go

AND

rclone rcloneMatch1.64.2-r0go

AND

rclone rcloneMatch1.68.1-r0go

AND

rclone rcloneMatch1.70.1-r0go

AND

rclone rcloneMatch1.53.3-r4go

AND

rclone rcloneMatch1.61.1-r2go

AND

rclone rcloneMatch1.51.0-r0go

AND

rclone rcloneMatch1.72.1-r0go

AND

rclone rcloneMatch1.71.0-r4go

AND

rclone rcloneMatch1.67.0-r1go

AND

rclone rcloneMatch1.63.1-r2go

AND

rclone rcloneMatch1.58.0-r2go

AND

rclone rcloneMatch1.66.0-r1go

AND

rclone rcloneMatch1.69.1-r1go

AND

rclone rcloneMatch1.60.1-r1go

AND

rclone rcloneMatch1.53.3-r2go

AND

rclone rcloneMatch1.69.1-r0go

AND

rclone rcloneMatch1.60.0-r0go

AND

rclone rcloneMatch1.62.2-r2go

AND

rclone rcloneMatch1.71.0-r2go

AND

rclone rcloneMatch1.69.0-r0go

AND

rclone rcloneMatch1.65.0-r0go

AND

rclone rcloneMatch1.66.0-r3go

AND

rclone rcloneMatch1.63.0-r0go

AND

rclone rcloneMatch1.53.3-r1go

AND

rclone rcloneMatch1.68.0-r0go

AND

rclone rcloneMatch1.59.0-r0go

AND

rclone rcloneMatch1.57.0-r1go

AND

rclone rcloneMatch1.65.2-r0go

AND

rclone rcloneMatch1.67.0-r0go

AND

rclone rcloneMatch1.51.0-r1go

AND

rclone rcloneMatch1.71.0-r0go

AND

rclone rcloneMatch1.70.1-r1go

AND

rclone rcloneMatch1.57.0-r3go

AND

rclone rcloneMatch1.69.2-r0go

AND

alpinelinux alpine_linuxMatchedge

grpc google.golang.org/grpcRangev1.0.0–1.0.0go

grpc github.com/grpc/grpc-goRangev1.0.0–1.0.0go

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
github	www.github.com/advisories/GHSA-p77j-4mvh-x3m3
github	www.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

16 May 2026 03:32Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.1

EPSS0.0002

SSVC