Homarr < 1.54.0 - Information Disclosure

Homarr 1.54.0 contains an information disclosure caused by the integration.all tRPC endpoint being exposed as a publicProcedure, letting unauthenticated users retrieve sensitive integration metadata, exploit requires no authentication. id: CVE-2026-27796 info: name: Homarr 1.54.0 - Information...

CVE-2026-127212: dokploy: Dokploy before 0.31.1 contains a missing ownership check vulnerability in the readAppMonitoring tRPC procedure that…

Dokploy before 0.31.1 contains a missing ownership check vulnerability in the readAppMonitoring tRPC procedure that allows authenticated attackers to access container metrics belonging to other organizations by supplying an arbitrary appName. Attackers can query getApplicationStats with any...

CVE-2026-127212

Dokploy versions prior to 0.31.1 are vulnerable to a broken access control flaw in the readAppMonitoring tRPC procedure. The root cause is a missing ownership check , which allows authenticated attackers to access container metrics belonging to other organizations on self-hosted multi-tenant inst...

CVE-2026-65013-BOLA-IDOR

CVE-2026-65013-BOLA-IDOR Reproducible PoC ofBOLA / IDOR in the tRPC API of Onlook CVE-2026-65013. Any authenticated user can read, modify, and delete projects, members, and AI history of other users just by passing their UUIDs to the tRPC procedures versions = 0.2.32. | ---|--- CVE| CVE-2026-6501...

PT-2026-146083

Dokploy before 0.31.1 contains a missing ownership check vulnerability in the readAppMonitoring tRPC procedure that allows authenticated attackers to access container metrics belonging to other organizations by supplying an arbitrary appName. Attackers can query getApplicationStats with any...

CVE-2026-122317 SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email, name, avatar,...

CVE-2026-122317 SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email, name, avatar,...

CVE-2026-122317

The software SplitPro (versions up to and including 2.1.6 ) is vulnerable to an authorization bypass within the user.getUserDetails tRPC query. The root cause is an IDOR (CWE-639) where the application fails to properly validate ownership, allowing authenticated users to retrieve account details ...

CVE-2026-122317 SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user's email, name, avatar,...

EUVD-2026-110513

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the client.list tRPC query. Attackers can request client.list with a project ID and receive full Client rows including the secr...

EUVD-2026-110517

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unauthenticated attackers to read bot events by only checking shareOverview row existence. Attackers can send anonymous requests with a projectId to retrieve bot-event names, types,...

EUVD-2026-110518

OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any project's annotations by calling the public reference.getChartReferences tRPC procedure. Attackers can send requests with guessable slug-based project IDs to dump cross-tenant...

EUVD-2026-110514

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a...

EUVD-2026-110526

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens,...

CVE-2026-116809

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unauthenticated attackers to read bot events by only checking shareOverview row existence. Attackers can send anonymous requests with a projectId to retrieve bot-event names, types,...

CVE-2026-116806

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a...

CVE-2026-116805

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the client.list tRPC query. Attackers can request client.list with a project ID and receive full Client rows including the secr...

OpenPanel permission and access control issues vulnerability

Versions prior to OpenPanel 3.0.0 contain a permission and access control vulnerability stemming from an absence of authorization in onboarding.project’s tRPC mutation. This flaw enables non-administrator organizational members to create projects and generate writeable ingestion credentials,...

OpenPanel information disclosure vulnerability

Versions prior to OpenPanel 3.0.0 contain an information disclosure vulnerability. This vulnerability stems from improper handling of client.list tRPC queries. Project members with read-level access can request client.list using a project ID, thereby obtaining a complete Client record including t...

OpenPanel permission and access control issues vulnerability

Versions prior to OpenPanel 3.0.0 contain a permission and access control vulnerability. This flaw stems from a lack of authorization checks in the event.bots tRPC process; it merely verifies whether the “shareOverview” line exists. As a result, unauthenticated attackers can exploit anonymous...