CVE-2026-33951 | SignalK signalk-server up to 2.23.x HTTP Endpoint sourcePriorities access control

A vulnerability was found in SignalK signalk-server up to 2.23.x and classified as critical. The affected element is an unknown function of the file /signalk/v1/api/sourcePriorities of the component HTTP Endpoint. Such manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2026-33951. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.