CVE-2026-78214

Published 29 September 2026 · tracked since 30 September 2026

Description

An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matching the incoming request path against protected Actuator paths. By sending a specially crafted request containing a percent-encoded path, a rem

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97395
• CVE-2026-71898 MEDIUM 4.3
• CVE-2026-71899
• CVE-2026-81569 MEDIUM 4.3
• CVE-2026-71897 MEDIUM 4.3
• CVE-2026-98164
• CVE-2026-82804 HIGH 8.8
• CVE-2026-82973 CRITICAL 9.4
• CVE-2026-73599 MEDIUM 5.4
• CVE-2026-100823

→ Open the live CVE board · all tools