CVE-2026-71879 in Integrated Publishing Toolkit

Resumen

por MITRE • 2026-08-18

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Mandiant
• Reservar: 2026-08-08
• Divulgación: 2026-08-18
• Moderación: aceptado
• Artículo: VDB-391881
• CPE: listo
• CWE: CWE-306 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-71879
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71879
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-71879/