Echo Go Framework Patched for Critical WebSocket Access Control Bypass Vulnerability
TL;DR Maintainers of the LabStack Echo Go framework disclosed a critical access control bypass vulnerability tracked as CVE-2026-118264 (CVSS v4.0: 9.1). The flaw allows unauthenticated attackers to bypass route-level authentication and authorization middleware via...
