PT-2026-93812

Name of the Vulnerable Software and Affected Versions TDuck survey form versions prior to 5.1 Description An authorization bypass exists in the 'POST /user/form/data/update' endpoint. This issue allows authenticated users to overwrite form submission data belonging to other users. Attackers can...

CVE-2026-92567: Authorization Bypass Through User-Controlled Key

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify...