What the vulnerability does
01Description
Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
CVSS base score
9.6/10
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Key dates
02Disclosure timeline
March 5, 2026
CVE published
March 5, 2026
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2020-10126
CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm
CVE-2021-3547
CVE-2025-23017
CVE-2022-38081 Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.
