CVE-2026-55457 | intranda goobi-viewer-core up to 26.4 AuthorizationFilter Configuration.getWebApiToken token improper authentication

October 23, 2026 Yanac

A vulnerability, which was classified as critical, has been found in intranda goobi-viewer-core up to 26.4. Affected by this issue is the function Configuration.getWebApiToken of the component AuthorizationFilter. This manipulation of the argument token causes improper authentication.

This vulnerability is registered as CVE-2026-55457. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More