CVE-2026-82919

Received Received - Intake

Authentication Bypass in CU Silicon via Missing Auth in views.py

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulDB

Description

A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-31

Last Modified

2026-08-31

Generated

2026-09-01

AI Q&A

2026-09-01

EPSS Evaluated

N/A

NVD

CVE-2026-82919

Affected Vendors & Products

Vendor	Product	Version / Range
cu_silicon	edit_endpoint	to 0.1.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing authentication issue in the cu silicon software up to version 0.1.5. It exists in the create_app function of the views.py file within the edit Endpoint component. An attacker can exploit this remotely due to improper access controls, allowing unauthorized actions without authentication.

Impact Analysis

An attacker could exploit this to perform unauthorized actions on the affected system remotely. Since the exploit is publicly available, the risk of exploitation is higher. This could lead to data breaches, unauthorized modifications, or other malicious activities depending on the system's use case.

Compliance Impact

Missing authentication can violate compliance requirements such as GDPR (data protection) and HIPAA (health data security) by allowing unauthorized access to sensitive data. Organizations may face legal penalties, reputational damage, and loss of trust due to non-compliance resulting from this vulnerability.

Mitigation Strategies

Immediately upgrade cu silicon to a version beyond 0.1.5 where the vulnerability is patched. If no patch exists, disable the edit endpoint in views.py or restrict network access to it until a fix is applied.

Hi! I’m here to help you understand CVE-2026-82919. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70