{"id":"CVE-2026-127279","title":"AIP-PUB ACPs-community Discovery Server main.py missing authentication","summary":"A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The atta…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-306","CWE-287"],"vendor":"AIP-PUB","product":"ACPs-community","affected":["ACPs-community 2.0","ACPs-community 2.1","ACPs-community 2.2.0"],"published":"2026-11-13","updated":"2026-11-13","sourceUpdated":"2026-11-13T01:00:25.095Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-127279","references":[{"url":"https://vuldb.com/vuln/436435","label":"VDB-436435 | AIP-PUB ACPs-community Discovery Server main.py missing authentication"},{"url":"https://vuldb.com/vuln/436435/cti","label":"VDB-436435 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-127279","label":"CVE-2026-127279 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1040952","label":"Submit #1040952 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0) Missing Authentication"},{"url":"https://github.com/AIP-PUB/ACPs-community/issues/12"},{"url":"https://github.com/AIP-PUB/ACPs-community/"}],"tags":["cve.org"],"ingestedAt":"2026-11-13T01:19:02.060Z","slug":"CVE-2026-127279","body":"## Overview\n\nA vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.\n\n## Affected\n\n- `ACPs-community 2.0`\n- `ACPs-community 2.1`\n- `ACPs-community 2.2.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}