Unauthenticated Remote Code Execution in Akana API Platform
⚠️ CVE-Referenzen:
CVE-2026-85978
Perforce - Akana - CRITICAL - CVE-2026-85978.
A security vulnerability in the Policy Manager console of the Akana API Platform allows attackers to exploit a path normalization flaw between the authentication filter and servlet dispatcher. By sending a specially crafted request, an unauthorized user could bypass authentication, reaching sensitive endpoints that execute provided script code without appropriate sandboxing measures. This exploit could lead to arbitrary code execution, presenting a significant risk as it requires no authentication or interaction from the user, making it essential for users of Akana API Platform to address this issue promptly.
Quelle: securityvulnerability.io