CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-7291

creationtimestamp| type| source ---|---|--- 2026-04-28 21:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklix4i7rf2k...

CVE-2026-7295

creationtimestamp| type| source ---|---|--- 2026-04-28 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklif7mghe2r...

CVE-2026-7294

creationtimestamp| type| source ---|---|--- 2026-04-28 20:55:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklhtcqdkx2t...

CVE-2026-42424

creationtimestamp| type| source ---|---|--- 2026-04-28 20:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklhln6esw2e...

CVE-2026-42428

creationtimestamp| type| source ---|---|--- 2026-04-28 20:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgzlawgp2t...

CVE-2026-42430

creationtimestamp| type| source ---|---|--- 2026-04-28 20:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklguovjtu2q...

CVE-2026-5794

creationtimestamp| type| source ---|---|--- 2026-04-28 20:35:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgq7fmoj2k...

CVE-2026-42429

creationtimestamp| type| source ---|---|--- 2026-04-28 20:25:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklg64g6io2q...

CVE-2026-6238

creationtimestamp| type| source ---|---|--- 2026-04-28 20:22:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfyc2yf52v 2026-07-11 17:20:42+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

EUVD-2026-26144

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-6970

creationtimestamp| type| source ---|---|--- 2026-04-28 20:11:02+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mklfebpkit2s 2026-05-01 07:03:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrkpz77ed26 2026-05-06 07:40:29+00:00| seen|...

CVE-2026-7360

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:15:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklwel5g7v2v 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7358

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvarfm3u2h 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7348

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklugzsstg2e 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7361

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvjpue7m2p 2026-04-29 04:10:36+00:00| seen|...

CVE-2026-7351

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklu5o2z2n2k 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-23562

creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...

CVE-2026-42544

creationtimestamp| type| source ---|---|--- 2026-04-28 18:30:03+00:00| published-proof-of-concept| https://github.com/emmett-framework/granian/security/advisories/GHSA-vrg7-482j-p6f6...