Report: - crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing auth... CVE-2026-7714

Report: - crocodilestick Calibre-Web-Automated Admin Endpoint cwa_functions.py missing auth... CVE-2026-7714

CVE ID :CVE-2026-7714 Published : May 4, 2026, 1:16 a.m. | 46 minutes ago Description :A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This manipulation causes missing authentication. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
May 4, 2026