CVE-2026-129428 | rcourtman Pulse up to 6.7.x Approvals /api/ai/approvals authorization

November 14, 2026 Yanac

A vulnerability classified as critical has been found in rcourtman Pulse up to 6.7.x. The affected element is an unknown function of the file /api/ai/approvals of the component Approvals. This manipulation causes missing authorization.

This vulnerability appears as CVE-2026-129428. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More