EUVD-2026-116595

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...

CVE-2026-121582

A vulnerability exists in Umami up to version 3.4.1 within the Record API Endpoint component, specifically affecting an unknown function in the file src/app/api/record/route.ts. The root cause is an authorization bypass resulting from the manipulation of the Website argument. This vulnerability c...

CVE-2026-121582 Umami Record API Endpoint route.ts authorization

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...