CVE-2026-49447 | azukaar Cosmos-Server 0.22.18 public-devices improper authorization

A vulnerability was found in azukaar Cosmos-Server 0.22.18. It has been rated as problematic. This vulnerability affects unknown code of the file /cosmos/api/constellation/public-devices. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-49447. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.