Search/CVE-2026-53459
● CVE

CVE-2026-53459

DiscoveredSep 15, 2026UpdatedSep 29, 2026

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database access to fail, granting unauthenticated access to all protected endpoints. Version 0.2.4.4 patches the issue.

CVSS v3.1
—
EPSS
0.76%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 17, 2026 → Sep 25, 2026
▲ 0.34pp
0.42% → 0.76% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
Sep 15, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 29, 2026