Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: bastillion-io Clear all filters
TI-2026-52919 CVE-2026-75627 · GHSA-9v44-g22g-qfg5

Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

Priority HIGH 81

Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00844 Published 2026-08-18 No fix listed CWE-288