Vulnerability · Published Sep 24, 2026 · Assigned by VulDB

CVE-2026-97231volotat Anagnorisis Socket.IO Connect app.py missing authentication

High 7.3

In plain English

A high-severity missing authentication in Anagnorisis from volotat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.4%top 67.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
volotat	Anagnorisis	0.10.20.30.3.00.3.10.4.0

Weakness: CWE-306, CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-409321 | volotat Anagnorisis Socket.IO Connect app.py missing authentication vdb-entry
VDB-409321 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-97231 | CVE Analysis and Report third-party-advisory
Submit #908265 | volotat Anagnorisis 0.4.0 Missing Authentication third-party-advisory
https://note-hxlab.wetolink.com/share/y74Vzt1jfkAi exploit