EUVD-2026-120536

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...

CVE-2026-125373: ietf-tools datatracker: IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to…

IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view...