CVE-2026-116677 | OpenWISP Controller up to 1.3.1 CrlDownload crl CrlDownloadView.retrieve privileges management

October 27, 2026 Yanac

A vulnerability described as problematic has been identified in OpenWISP Controller up to 1.3.1. The affected element is the function CrlDownloadView.retrieve of the file /api/v1/controller/ca//crl of the component CrlDownload. The manipulation results in improper privilege management.

This vulnerability was named CVE-2026-116677. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More