CVE-2026-72914

creationtimestamp| type| source ---|---|--- 2026-08-10 23:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr7ce6i5n2m 2026-08-12 06:12:39+00:00| seen| https://bsky.app/profile/harald.mementomori.social.ap.brid.gy/post/3msuhwgxmzpr2...

CVE-2026-72914

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.21, 4.5.14, 4.6.4, and 4.7.0-beta.1, the administrative statistics endpoints handled by Api::V1::Admin::MeasuresController and Api::V1::Admin::RetentionController checked authorization only after beginning...