CVE-2026-63288 is a vulnerability where a WebSocket request to a specific API endpoint allows unauthorized access to a different API endpoint, bypassing the intended authentication controls. This flaw compromises confidentiality, integrity, and availability of the affected system.