CVE-2026-68548 | xyproto Algernon up to 1.17.9 URL-prefix authorization gate /Admin/secret.lua strings.HasPrefix improper authorization

A vulnerability, which was classified as critical, was found in xyproto Algernon up to 1.17.9. The affected element is the function strings.HasPrefix of the file /Admin/secret.lua of the component URL-prefix authorization gate. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-68548. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More