PatchSiren

Diaple CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Diaple CVE published 2026-10-15

CVE-2026-101287

CVE-2026-101287 is an authentication bypass vulnerability in Stela versions prior to 1.60.1. The vulnerability allows a remote attacker to manipulate a cookie named 'authProcess' to bypass authentication checks and impersonate any account, including one with SUPER_ADMIN privileges. This could lead to potential impersonation of any account, possible compromise of confidentiality and integrity of the applic [truncated]