intcontrol_2 vulnerabilities

CVEs whose affected-version data names the intcontrol_2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57920High· 7.7

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.

▾ Twilightpeplink · intcontrol_2EPSS 0.38%via NVD

intcontrol_2 vulnerabilities (CVEs) · VulnSea