GitHub Advisoryadvisory · npm

GHSA-2h6j-mhcp-9j9h GenieACS has an unauthenticated access vulnerability via the NBI API endpoint

HIGH Published 2026-04-07 Modified 2026-04-10 Official page ↗
Aliases
CVE-2025-56015
Ecosystem
npm
Packages
genieacs
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284
Reviewed
2026-04-10

Affected packages

• npm genieacs: 1.2.13 (no fix yet)

Description

In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

Related

Alias · CVE (1)

  • CVE-2025-56015 In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint. vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References