CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-56782 — Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/...

·Source: NIST NVD

Updated:

Executive Summary

Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or

Analysis

Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentication. CVSS Score: 9.8. Published: 2026-06-29T18:16:38.817.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56782
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 29, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

How Cloud Security Risks Grow With Home-Based Care

As hospital-at-home programs expand and AI adoption accelerates, healthcare organizations face mounting cloud security demands. Anahi Santiago, CISO of ChristianaCare, discusses vendor accountability, identity management, clinical AI risks and the need for stronger cybersecurity foundations.

Bank Info Security
MEDIUMVulnerability

DHS Eyes 600 New Cybersecurity Hires, New Director for CISA

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/dhs-eyes-600-new-cybersecurity-hires-new-director-for-cisa-image_small-10-a-32105.jpg" align=right hspace=4><b>DHS Secretary Says Agency Has Funding But Lacks Skilled Cybersecurity Personnel</b><br>Homeland Security Secretary Markwayne Mullin told lawmakers CISA has adequate funding but must hire roughly 600 cybersecurity professi

Bank Info Security
LOWVulnerability

CyberFox Purchases Timus to Bring SASE Capabilities to SMBs

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cyberfox-purchases-timus-to-bring-sase-capabilities-to-smbs-image_small-4-a-32104.jpg" align=right hspace=4><b>CEO David Bellini Says Remote Work Drives Demand for Always-On Secure Connectivity</b><br>CyberFox has acquired Tampa, Florida-based SASE startup Timus Networks to help small and midsize businesses replace legacy VPN and

Bank Info Security