| Package | Affected versions | Patched versions |
|---|---|---|
| intcontrol 2 | ≤ 2.14.2 |
Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free