Main
Vulnerability Database
Exploits
ID:12974 - Exploit for Improper authentication in Gaia - CVE-2026-16232
ID:12974 - Exploit for Improper authentication in Gaia - CVE-2026-16232
Published: August 25, 2026
Vulnerability identifier: #VU139241
Vulnerability risk: Critical
CVE-ID: CVE-2026-16232
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
Gaia
Gaia
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authentication.
The vulnerability exists due to improper authentication in SmartConsole login using application token in Management when handling login requests. A remote attacker can send a specially crafted login request to bypass authentication.
The vulnerability is being actively exploited in the wild.
Remediation
Install security update from vendor's website.