CVE-2026-82919: Missing Authentication in cu silicon

This vulnerability affects the cu silicon software versions 0.1.0 through 0.1.5. The flaw is due to missing authentication checks in the create_app function of the views.py file in the edit Endpoint component. This allows remote attackers to bypass authentication controls and potentially manipulate the application. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Exploit code is publicly available, increasing the risk of exploitation. The vendor has not provided any response or patch, and no official remediation level is stated.

The missing authentication vulnerability permits remote attackers to invoke the create_app function without credentials, potentially leading to unauthorized actions within the application. This could result in unauthorized creation or modification of application data or resources. The CVSS vector indicates no privileges or user interaction are required, with low to low integrity and availability impacts. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider implementing compensating controls such as restricting access to the vulnerable endpoint via network controls or authentication proxies until a patch is released.