CVE-2026-54246 | zalando skipper up to 0.26.10 routesrv-no-auth missing authentication

July 18, 2026 Yanac

A vulnerability labeled as problematic has been found in zalando skipper 0.13.218/0.13.236/0.23.0/0.24.0/0.26.10. Affected is an unknown function of the component routesrv-no-auth. The manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-54246. The attacker must have access to the local network to execute the attack. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More