CVE-2026-124026

Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/id/copy with other bars' cocktail ids to copy private...

EUVD-2026-118434

Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/id/copy with other bars' cocktail ids to copy private...

CVE-2026-124026

The Bar Assistant software (versions 6.0.0-rc1 before 6.11.0 ) is vulnerable to an incorrect authorization flaw in the CocktailController::copy function. This vulnerability allows registered users to bypass source cocktail membership checks. Specifically, an attacker who owns a bar can perform a ...

CVE-2026-124026 Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copy

Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/id/copy with other bars' cocktail ids to copy private...

CVE-2026-124026 Bar Assistant 6.0.0-rc1 before 6.11.0 Incorrect Authorization via Cocktail Copy

Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks. Attackers owning a bar can POST to /api/cocktails/id/copy with other bars' cocktail ids to copy private...