CVE-2026-65310

Name of the Vulnerable Software and Affected Versions ANDRITZ HIPASE-250 (affected versions not specified)

Description In the default configuration, the software exposes its data and configuration endpoint without authentication and implements a permissive CORS (Cross-Origin Resource Sharing) policy on every response. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain. This allows an unauthenticated attacker with network access to read live process values and server configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.