CVE-2026-46651 | intranda goobi-viewer-core up to 26.04 Download Task Endpoint monitor.socket DownloadTaskEndpoint missing authentication

October 23, 2026 Yanac

A vulnerability described as critical has been identified in intranda goobi-viewer-core up to 26.04. This impacts the function DownloadTaskEndpoint of the file /tasks/download/monitor.socket of the component Download Task Endpoint. Executing a manipulation can lead to missing authentication.

This vulnerability is tracked as CVE-2026-46651. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More