CVE-2026-71278 [CRITICAL] – rust-iot-platform allows creating a “calc rule” via POST /calc-rule/create (api/src/contro

rust-iot-platform allows creating a “calc rule” via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication.