TI-2026-54160 CVE-2026-77767 · GHSA-5r22-jfv5-3cpgMissing authorization in reconmapPriority HIGH 77Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00457 · Published 2026-08-21 · No fix listed CWE-862