CVE-2026-43889 Outline: Unauthorized Document Publication via Mixed collectionId+documentId Share

Outline is a service that allows for collaborative documentation. Prior to 1.7.0, the shares.create API accepts both collectionId and documentId simultaneously and, when published=false, only verifies read access for each—skipping the "share" permission check. A subsequent shares.update authorize...

MINI-QQMH-W2F9-CGH2

Bulletin has no description...

MINI-35WF-F2WQ-Q2H5

Bulletin has no description...

MINI-7W6H-63QF-6FWF

Bulletin has no description...

MINI-G2RP-FCH9-G6CG

Bulletin has no description...

MINI-FFQC-89JC-QJXH

Bulletin has no description...

MINI-93H8-49MH-758Q

Bulletin has no description...

MINI-6258-82J5-62R6

Bulletin has no description...

MINI-5QFH-4582-PF3H

Bulletin has no description...

MINI-RP6C-GJ23-FWP2

Bulletin has no description...

MINI-XW49-VP38-4HHW

Bulletin has no description...

MINI-8Q5R-8PM6-56V8

Bulletin has no description...

MINI-H6X5-2GF4-RJH7

Bulletin has no description...

MINI-H6QQ-PG5C-8H3G

Bulletin has no description...

MINI-86JP-4P5Q-72XV

Bulletin has no description...

MINI-X4WW-MH4J-3533

Bulletin has no description...

MINI-G94G-R4MM-JM6V

Bulletin has no description...

CGA-R657-P3Q7-6WC9

Bulletin has no description...

MINI-WV3M-FC5J-7FJJ

Bulletin has no description...

PT-2026-39248

Name of the Vulnerable Software and Affected Versions free5GC BSF version 4.2.1 Description An unsynchronized write occurs on the global Subscriptions map within the BSF handler for the endpoint '/nbsf-management/v1/subscriptions/subId'. While the handler reads the map using a read-lock via the...