Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is bd4891c60315f17611a3b7a651ffe0fba7cfe71e. Applying a patch is advised to resolve this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16209 Unauthenticated Remote Access in Gerapy Project Upload Endpoint Up to 0.9.13 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16209
Post summary
CVE-2026-16209 is a newly disclosed unauthenticated remote access vulnerability affecting Gerapy up to version 0.9.13; the source text provides the vulnerability type but no PoC, exploit tool, or patch details.