What is GHSA-9cwq-xr29-c4rp?

GHSA-9cwq-xr29-c4rp is a security advisory published by GitHub Security Advisories with Critical severity. Missing authentication in initial setup functionality left exposed after initial setup is...

Which CVE IDs does GHSA-9cwq-xr29-c4rp cover?

GHSA-9cwq-xr29-c4rp covers the following CVE IDs: CVE-2026-71878. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-9cwq-xr29-c4rpCritical

Missing authentication in initial setup functionality left exposed after initial setup is...

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-71878 →

📋 Description

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-71878
https://github.com/gbif/ipt/issues/3115
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0014.md
https://www.gbif.org/ipt
https://github.com/advisories/GHSA-9cwq-xr29-c4rp