CVE-2026-76243 — stigmem before 0.9.0a2 Authentication Bypass via Disabled Auth
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation opera…
Published: 2026-08-19 · CVSS: 9.2 · CVSS 4.0
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7