CVE-2026-28352 | Indico up to 3.3.10 API Endpoint missing authentication

February 27, 2026 Yanac

A vulnerability was found in Indico up to 3.3.10. It has been classified as critical. This affects an unknown function of the component API Endpoint. Performing a manipulation results in missing authentication.

This vulnerability was named CVE-2026-28352. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More