GBIF Integrated Publishing Toolkit vulnerabilities
3 known CVE vulnerabilities in GBIF Integrated Publishing Toolkit, translated and rated.
- CVE-2026-71879Critical
Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass.
- CVE-2026-71878Critical
Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass.
- CVE-2026-71880High
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit before version 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection.