---
id: CVE-2026-127279
title: AIP-PUB ACPs-community Discovery Server main.py missing authentication
summary: >-
  A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This
  impacts an unknown function of the file discovery-server/app/main.py of the
  component Discovery Server. The manipulation results in missing
  authentication. The atta…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-306
  - CWE-287
vendor: AIP-PUB
product: ACPs-community
affected:
  - ACPs-community 2.0
  - ACPs-community 2.1
  - ACPs-community 2.2.0
published: '2026-11-13'
updated: '2026-11-13'
sourceUpdated: '2026-11-13T01:00:25.095Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-127279'
references:
  - url: 'https://vuldb.com/vuln/436435'
    label: >-
      VDB-436435 | AIP-PUB ACPs-community Discovery Server main.py missing
      authentication
  - url: 'https://vuldb.com/vuln/436435/cti'
    label: 'VDB-436435 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-127279'
    label: CVE-2026-127279 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1040952'
    label: >-
      Submit #1040952 | AIP-PUB ACPs-community main @ commit 8334e6b (v2.2.0)
      Missing Authentication
  - url: 'https://github.com/AIP-PUB/ACPs-community/issues/12'
  - url: 'https://github.com/AIP-PUB/ACPs-community/'
tags:
  - cve.org
ingestedAt: '2026-11-13T01:19:02.060Z'
---

## Overview

A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

## Affected

- `ACPs-community 2.0`
- `ACPs-community 2.1`
- `ACPs-community 2.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.