{"id":82789,"date":"2026-07-31T12:46:58","date_gmt":"2026-07-31T09:16:58","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-65310-missing-authentication-and-permissive-cors-policy\/"},"modified":"2026-07-31T12:46:58","modified_gmt":"2026-07-31T09:16:58","slug":"cve-2026-65310-missing-authentication-and-permissive-cors-policy","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-65310-missing-authentication-and-permissive-cors-policy\/","title":{"rendered":"CVE-2026-65310 &#8211; Missing authentication and permissive CORS policy"},"content":{"rendered":"<p>CVE ID :CVE-2026-65310<\/p>\n<p>  Published : July 31, 2026, 9:16 a.m. | 29\u00a0minutes ago<\/p>\n<p>  Description :ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration<br \/>\nof affected versions, exposes its data and configuration endpoint<br \/>\nwithout any authentication and permissive CORS on every response. An<br \/>\nunauthenticated attacker with network access can read live process<br \/>\nvalues and server configuration.<\/p>\n<p>  Severity: 7.5 | HIGH<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-65310 Published : July 31, 2026, 9:16 a.m. | 29\u00a0minutes ago Description :ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server configuration. &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-82789","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=82789"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82789\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=82789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=82789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=82789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}