CVE-2026-16209 | Gerapy up to 0.9.13 Project Upload Endpoint views.py missing authentication (Issue 317)

July 18, 2026 Yanac

A vulnerability categorized as critical has been discovered in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication.

This vulnerability is traded as CVE-2026-16209. The attack may be launched remotely. Furthermore, there is an exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More