Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/31 9:17 p.m.•23 views

CVE-2026-82906

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS0.00574EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/31 8:00 p.m.•17 views

CVE-2026-82906 sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS4.4AI score0.00574EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/31 8:00 p.m.•48 views

CVE-2026-82906 sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS0.00574EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/31 8:00 p.m.•19 views

EUVD-2026-68763

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS4.4AI score0.00574EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/31 8:00 p.m.•27 views

CVE-2026-82906

A missing authentication flaw in sdcb chats versions up to 1.12.0 affects the Signed File Download Endpoint , specifically the DownloadPublic function in src/BE/web/Controllers/Chats/Files/FileController.cs. An unauthenticated remote attacker with high complexity can exploit this to achieve low c...

6.3CVSS4.4AI score0.00574EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•25 views

PT-2026-83983

Name of the Vulnerable Software and Affected Versions sdcb chats versions prior to 1.12.1 Description A flaw in the Signed File Download Endpoint component allows remote exploitation due to missing authentication. The issue resides in the DownloadPublic function within the...

6.3CVSS5.6AI score0.00574EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•7 views

CVE-2026-82906: Missing Authentication for Critical Function

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS4.4AI score0.00574EPSS
SaveExploits0References3
Rows per page
Query Builder