Security Advisory

CVE-2026-57920

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-26 12:20:52

Last updated 2026-06-26 13:32:31

Assigner mitre

CVSS score 7.7

State PUBLISHED

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.