CVE-2026-86543 | knowns-dev knowns up to 0.29.x Management API /api/tunnel/start improper authentication

September 8, 2026 Yanac

A vulnerability was found in knowns-dev knowns up to 0.29.x. It has been declared as critical. The impacted element is an unknown function of the file /api/tunnel/start of the component Management API. Such manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-86543. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More