Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2026/09/16 2:40 p.m.•25 views

CVE-2026-92567 TDuck survey form through 5.0 Unauthorized Data Modification

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...

7.1CVSS6.1AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/16 2:40 p.m.•58 views

CVE-2026-92567 TDuck survey form through 5.0 Unauthorized Data Modification

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...

7.1CVSS0.00423EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/16 2:40 p.m.•27 views

CVE-2026-92567 TDuck survey form through 5.0 Unauthorized Data Modification

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...

7.1CVSS6AI score0.00423EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/16 2:40 p.m.•21 views

EUVD-2026-80813

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...

7.1CVSS6.1AI score0.00423EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•13 views

PT-2026-93812

Name of the Vulnerable Software and Affected Versions TDuck survey form versions prior to 5.1 Description An authorization bypass exists in the 'POST /user/form/data/update' endpoint. This issue allows authenticated users to overwrite form submission data belonging to other users. Attackers can...

7.1CVSS6AI score0.00423EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•14 views

CVE-2026-92567: Authorization Bypass Through User-Controlled Key

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...

7.1CVSS6.1AI score0.00423EPSS
SaveExploits0References2
Rows per page
Query Builder