CVE-2019-14511

CVE-2019-14511 describes an authentication bypass vulnerability in Sphinx Technologies Sphinx 3.1.1, where the search engine by default lacks authentication and listens on all network interfaces, potentially exposing it to the internet. This vulnerability carries a CVSSv3 score of 7.5 (HIGH), indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality impact without requiring any privileges or user interaction. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the default configuration presents a significant security risk if not properly mitigated.