Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/29 1:17 p.m.•41 views

CVE-2026-101269

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

2.3CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 12:01 p.m.•42 views

CVE-2026-101269

A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...

2.3CVSS5.9AI score0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 12:01 p.m.•14 views

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

2.3CVSS5.9AI score0.0022EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/29 12:01 p.m.•17 views

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

2.3CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/29 12:01 p.m.•46 views

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

2.3CVSS0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•8 views

PT-2026-102517

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

2.3CVSS5.9AI score0.0022EPSS
SaveExploits0References2
Rows per page
Query Builder