Critical severity9.8NVD Advisory· Published Aug 5, 2026· Updated Aug 26, 2026
CVE-2026-71278
CVE-2026-71278
Description
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.