← Back to search

CVE-2026-39769

7.5 HIGH

Published 2026-10-06 · Updated 2026-10-06

AI risk analysis

Summary
Graphina versions 3.1.12 and earlier suffer from unauthenticated broken authentication, allowing attackers to bypass authentication without valid credentials. This vulnerability enables unauthorized access to the application's functionality.
Exploitability
Exploitation is straightforward with no prerequisites, as the vulnerability allows complete authentication bypass for all users without requiring any valid credentials or session tokens.
Blast radius
The impact could be significant as attackers can gain full access to Graphina's administrative and user features without authentication, potentially leading to data exposure or unauthorized modifications.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Graphina version 3.1.13 or later to remediate this unauthenticated broken authentication vulnerability.
auth-bypasswebunauthenticatedbroken-auth

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-288

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.