CVE-2026-56782

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 29, 2026

Last Seen

June 30, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Authentication Bypass Vulnerability in Gorse Exposed78.0

Gorse versions prior to 0.5.10 contain a critical authentication bypass vulnerability (CVE-2026-56782) in the /api/dump and /api/restore endpoints. This flaw allows unauthenticated attackers to access sensitive data when the admin_api_key is left empty, which is the default setting. Attackers can ex...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Authentication Bypass Vulnerability in Gorse Exposed

Jun 30·1 sources

Related Articles (2)

CVE-2026-56782 AKAOMA CVE VULNERABILITIES / 14h Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentica

cve.akaoma.com·Jun 30

CVE-2026-56782 - Exploits & Severity

Related Entities

Data Breach CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication T1041 - Exfiltration Over C2 Channel T1567 - Exfiltration Over Web Service Gorse