CVE-2026-71878

UNKNOWN 0.0

Authentication bypass in Integrated Publishing Toolkit

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

CWE	CWE-306
Vendor	gbif
Product	integrated publishing toolkit
Published	Aug 18, 2026

Stay Ahead of the Next One

Get instant alerts for gbif integrated publishing toolkit

Be the first to know when new unknown vulnerabilities affecting gbif integrated publishing toolkit are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

GBIF / Integrated Publishing Toolkit

0 < 3.3.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

gbif.org: https://www.gbif.org/ipt github.com: https://github.com/gbif/ipt/issues/3115 github.com: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0014.md