Stela vulnerabilities

1 known vulnerability in Stela from Diaple. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Stela: Reliance on Cookies without Validation and Integrity Checking

  CVE-2026-101287Oct 15, 2026Diaple

  Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validStep