Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-57920

Access Control Bypass via Semicolon Injection in Peplink InControl 2

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Peplink
Products
Incontrol Intcontrol 2