CVE-2026-59104

UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is interpreted as \"use the only user\" rather than as invalid credentials, and the server returns a fully authenticated session. Because the service listens on all interfaces (0.0.0.0) without TLS by default, an unauthenticated remote attacker with network access to port 3334 can obtain an authenticated session without knowing any credential and then issue privileged commands, including commanding connected drones and uploading flight routes.

• CWE-287

• https://offseq.com/en/research/ugcs-cve-2026-59104/
• https://www.ugcs.com/

Published

Nov 6, 2026

Last Modified

Nov 6, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59098LobeChat through 2.2.9 contains a broken access control vuln…6.5
• CVE-2026-59099Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic v…9.1
• CVE-2026-5910Integer overflow in Media in Google Chrome prior to 147.0.77…8.8
• CVE-2026-59100LobeChat through 2.2.9 contains a broken object level author…5
• CVE-2026-59101AutoBangumi before 3.2.8 contains a server-side request forg…5.8
• CVE-2026-59102Forgejo before 15.0.3 contains a stored cross-site scripting…5.4
• CVE-2026-59105Jumis (formerly Tildes Jumis) creates and uses a Microsoft S…9.8
• CVE-2026-59106A security vulnerability has been identified in the WolfProt…9.8
• CVE-2026-59107A security vulnerability has been identified in the vSolutio…9.8
• CVE-2026-59109SQL injection in the Zalktis accounting application via trad…8.8
• CVE-2026-5911Policy bypass in ServiceWorkers in Google Chrome prior to 14…4.3
• CVE-2026-59111Improper neutralization of special elements used in an OS co…9.3