CVE-2026-40071 | pyLoad up to 0.5.0b3.dev96 WebUI JSON Endpoint /json/package_order authorization

A vulnerability was found in pyLoad up to 0.5.0b3.dev96. It has been classified as problematic. Affected is an unknown function of the file /json/package_order of the component WebUI JSON Endpoint. This manipulation causes incorrect authorization.

This vulnerability is handled as CVE-2026-40071. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.