GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-26190: Milvus Rest Api Group Missing Authenticate Middlewarecve-2026-26190-milvus-rest-api-group-missing-authenticate-middleware

A gin Group has REST API handlers registered via `RegisterRoutesTo` without the `authenticate` middleware being applied to that group. When this group is mounted on the metrics/management gin engine (default TCP/9091), it exposes business endpoints (collection CRUD, credential management, search/query) without authentication — even when `common.security.auth

GoCVE-2026-26190GHSA-7PPG-37FH-VCR6CWE-1188CWE-306
by Provallyupdated 2026-06-12Apache-2.0
3.6K0 direct3.6K via packs
82
All matching rules loaded.