Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Skipper : Missing Authentication for Critical Function Vulnerability - CVE-2026-54246 - Vulnerability Database
Skipper

Skipper : Missing Authentication for Critical Function Vulnerability - CVE-2026-54246

Medium
Reference: CVE-2026-54246
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-54246
Title: Skipper : Missing Authentication for Critical Function Vulnerability
Overview:

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13 the routesrv component serves cluster-wide control-plane data without application-layer authentication through /routes /routes/zone /swarm/redis/shards and /swarm/valkey/shards. The handlers registered in routesrv/routesrv.go eskipBytes.ServeHTTP in routesrv/eskipbytes.go RedisHandler.ServeHTTP in routesrv/redishandler.go and ValkeyHandler.ServeHTTP in routesrv/valkeyhandler.go only restrict HTTP metho