CVE-2026-82919: cu silicon edit Endpoint views.py create_app missing authentication
A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function createapp of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
cu silicon versions up to and including 0.1.5 are affected in the edit Endpoint component, specifically the create_app function in views.py.
Can this be exploited remotely without credentials?
Yes. The vulnerability is remotely exploitable and the supplied severity vector indicates no privileges or user interaction are required.
Is exploit code available?
Yes. A public exploit is available and may be used by attackers.
What is the likely impact of successful exploitation?
Successful exploitation can result in low-level impact to confidentiality, integrity, and availability, according to the provided severity vector.