CVE-2026-111674

Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names wi...

CVE-2026-111674

The software Tbed (versions through 20240319 ) is vulnerable to a missing authorization flaw in the /admin/setImgFileName endpoint. This vulnerability allows any authenticated user to rename images belonging to other users. An attacker can provide a victim's imgname—which is often exposed in publ...

EUVD-2026-102965

Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names wi...

PT-2026-116073

Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names wi...