TI-2026-75070 CVE-2026-111322Missing authentication in Archon control API allows host command executionPriority HIGH 81Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00892 · Published 2026-10-15 · No fix listed CWE-306