CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2026/02/26 10:00 p.m.•14 views

CVE-2026-27835

wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, "RepetitionsConfigViewSet" and "MaxRepetitionsConfigViewSet" return all users' repetition config data because their "getqueryset" calls ".all" instead of filtering by the authenticated user. Any register...

5.3CVSS5.6AI score0.00295EPSS

SaveExploits1References7

Rapid7 Vulnerability Database (full)•added 2026/02/26 12:00 a.m.•6 views

CVE-2026-27835: Authorization Bypass Through User-Controlled Key

wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, RepetitionsConfigViewSet and MaxRepetitionsConfigViewSet return all users' repetition config data because their getqueryset calls .all instead of filtering by the authenticated user. Any registered user...

4.3CVSS5.7AI score0.00295EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by