Description (CNA)
Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Peplink / InControl | affected 0 before 2026-06-03 |
CWE
CWE-551
References
ADP enrichment
No English description supplied.