CVE-2026-54568 | microsoft UFO up to 3.0.5 WebSocket ufo/server/ws/handler.py handle_device_info_request improper authorization

July 16, 2026 Yanac

A vulnerability labeled as problematic has been found in microsoft UFO up to 3.0.5. The affected element is the function handle_device_info_request of the file ufo/server/ws/handler.py of the component WebSocket Handler. Such manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-54568. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More