Iot-Ecology Rust-Iot-Platform
4 CVEs affecting Iot-Ecology Rust-Iot-Platform. Latest disclosed: 2026-08-29. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82452 | Critical | 9.8 | 2026-08-29 | rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handle… |
CVE-2026-71278 | Critical | 9.8 | 2026-08-05 | rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route d… |
CVE-2026-71277 | Critical | 9.1 | 2026-08-05 | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates… |
CVE-2026-82453 | High | 7.5 | 2026-08-29 | rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retr… |