CVE-2026-36453

Rhymix before version 2.1.31 is affected by an insecure direct object reference (IDOR) vulnerability, tracked internally as RVE-2026-1 . The flaw allows arbitrary file access via extra variables , meaning a low-privileged user can manipulate request parameters to read files outside the intended s...

EUVD-2026-77109

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...