Integrated Publishing Toolkit vulnerabilities

3 known vulnerabilities in Integrated Publishing Toolkit from GBIF. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Integrated Publishing Toolkit: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-71880Aug 18, 2026GBIF

  Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection

• 9.1 Critical severity

  Integrated Publishing Toolkit: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-71879Aug 18, 2026GBIF

  Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

• 9.2 Critical severity

  Integrated Publishing Toolkit: Missing Authentication for Critical Functionality

  CVE-2026-71878Aug 18, 2026GBIF

  Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass