CVE-2026-92764

OpenCVE before 3.1.0 contains an authorization flaw in its organizations API endpoint . The endpoint fails to scope results to the organization associated with the bearer token, instead returning all organizations that the token creator belongs to. An attacker holding a valid organization-scoped ...