CVE-2026-85636

Received Received - Intake

Missing Authentication in Trape Login Endpoint

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulDB

Description

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-04

Generated

2026-09-05

AI Q&A

2026-09-05

EPSS Evaluated

N/A

NVD

CVE-2026-85636

EUVD

EUVD-2026-71632

Affected Vendors & Products

Vendor	Product	Version / Range
jofpin	trape	1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability is in jofpin trape version 1.0.0, specifically in the Login Endpoint component's core/stats.py file. It allows remote attackers to bypass authentication requirements due to missing authentication checks. An exploit is publicly available, increasing the risk of unauthorized access.

Detection Guidance

Detecting this vulnerability requires checking for missing authentication in the Login Endpoint of jofpin trape 1.0.0. Inspect core/stats.py for exposed endpoints without proper authentication checks. Monitor network traffic for unauthorized access attempts to login-related paths.

Impact Analysis

If exploited, this vulnerability could allow attackers to gain unauthorized access to the system via the Login Endpoint. This may lead to data breaches, unauthorized actions, or further compromise of the application or network. The public availability of the exploit increases the likelihood of attacks.

Compliance Impact

This vulnerability could lead to unauthorized access, potentially violating data protection requirements under GDPR and HIPAA. Missing authentication may result in unauthorized data exposure or modification, leading to non-compliance with these regulations and potential legal consequences.

Mitigation Strategies

Immediately update jofpin trape to the latest version if available. If no update exists, restrict network access to the Login Endpoint via firewall rules. Implement strong authentication mechanisms for the affected component and monitor for suspicious activity.

Hi! I’m here to help you understand CVE-2026-85636. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70