CVE-2026-127281 | lanyulei ferry 1.0.0/1.0.0-beta.1 JWT Validation middleware/auth.go improper authentication

A vulnerability labeled as critical has been found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file middleware/auth.go of the component JWT Validation. The manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-127281. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More