CVE Notifier

CVE-2026-92780 CWE-862 8.8

KnowStreaming through 3.4.1 Missing Authorization on the REST API

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create …

cve.org didi:KnowStreaming 6 hari lalu

CVE-2026-92779 CWE-1321 7.6

Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content b…

cve.org BuilderIO:@builder.io/sdk-react · BuilderIO:@builder.io/sdk-vue · BuilderIO:@builder.io/sdk-svelte 6 hari lalu

CVE-2026-92778 CWE-693 5.4

CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes

CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers to bypass the feature gate. Attackers can access the form endpoints to start and stop the recurring…

cve.org yahoo:CMAK 6 hari lalu

CVE-2026-92776 CWE-863 8.1

Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass

Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with authorized folders. Users granted access to a folder can read and …

cve.org requarks:Wiki.js 6 hari lalu

CVE-2026-92775 CWE-918 6.5

Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch

Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissio…

cve.org requarks:Wiki.js 6 hari lalu

CVE-2026-92774 CWE-863 4.3

Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission

Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based access restrictions to be bypassed. Attackers can query the list, tree, tags, searchTags, and links reso…

cve.org requarks:Wiki.js 6 hari lalu

CVE-2026-92773 CWE-639 7.1

Trigger.dev before 4.6.0 GitHub App Installation Takeover

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying stat…

cve.org triggerdotdev:trigger.dev 6 hari lalu

CVE-2026-92772 CWE-862 7.1

Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX

Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles can install marketplace plugins and contro…

cve.org Leantime:leantime 6 hari lalu

CVE-2026-92771 CWE-863 6.5

Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query

Twenty before 2.35.0 fails to validate field and row permissions in the groupBy-with-records GraphQL resolver, allowing authenticated users to bypass permission checks. Attackers with canReadObjectRecords permission but …

cve.org twentyhq:twenty 6 hari lalu

CVE-2026-92770 CWE-200 6.5

Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover th…

cve.org goharbor:harbor 6 hari lalu

CVE-2026-92765 CWE-639 6.5

ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList

ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan…

cve.org archerysec:archerysec 6 hari lalu

CVE-2026-92764 CWE-863 4.3

OpenCVE before 3.1.0 Organization API Ignores Token Scope

OpenCVE before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve …

cve.org opencve:opencve 6 hari lalu