CVE-2026-56782

Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

CVSS 9.3 CRITICALCWE-306

Vexday Risk Score

45Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 9.3EPSS —KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Ciclo de vida

29 jun 2026Publicada en NVD

29 jun 2026PoC pública

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote attackers can exfiltrate the entire database including user records, items, and feedback data containing personally identifiable information, or completely overwrite the dataset without authentication.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

gorse-io · gorse

PoCs públicas encontradas — 1

githubgithub.com/BiiTts/CVE-2026-56782-Gorse-Auth-Bypass★ 0

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/gorse-io/gorse/commit/19fdcbb309fb5b609e9cc3eb10c74885b5b27da9 https://github.com/gorse-io/gorse/issues/1292 https://github.com/gorse-io/gorse/pull/1293 https://www.vulncheck.com/advisories/gorse-unauthenticated-database-dump-and-restore-via-api-dump-and-api-restore-endpoints