TI-2026-75436 CVE-2026-111650 · GHSA-7jg5-pchw-4x54ChronoFrame Setup Wizard API Missing AuthenticationPriority HIGH 77ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-16 · No fix listed CWE-306