CVE-2026-127278

Name of the Vulnerable Software and Affected Versions AIP-PUB ACPs-community versions prior to 2.2.0

Description A weakness in the verify-code component allows remote attackers to achieve improper authentication. This occurs through the manipulation of the phone argument within the send verification code() function located in the registry-server/app/account/service auth.py file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the send verification code() function to minimize the risk of exploitation.