CVE-2026-24134-PoC

CVE-2026-24134-PoC Overview This repository contains the Proof of Concept PoC for CVE-2026-24134 , a Broken Object Level Authorization BOLA vulnerability in StudioCMS. Contents cve202624134poc.py - Python exploitation script Prerequisites StudioCMS=0.1.1 pip install requests colorama Quick Start...

CVE-2026-77812

CVE-2026-77812 — DJI Drone Cleartext BLE Transmission of Wi-Fi PSK and Session UUID POC CVE record: https://vulners.com/cve/CVE-2026-77812 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77812 Description DJI Drone expose a DUML control channel over Bluetooth. Every message on that channel — in bo...

CVE-2026-119337

The open-source RAG engine RAGFlow versions 0.25.2 through 0.27.3 is vulnerable to a missing authorization flaw (CWE-862). The POST /api/v1/agents/chat/completions endpoint invokes completion_openai and returns via the openai-compatible branch before the UserCanvasService.accessible() check can v...

CVE-2026-55551

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

EUVD-2026-114196

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

CVE-2026-55551

The ZAC open-source workflow component for Dutch municipal case management is vulnerable to an improper authorization flaw in versions prior to 5.2.0 . The ZaakRestService.kt file omits necessary assertPolicy checks on by-id read endpoints. Consequently, an authenticated low-privileged user who k...

CVE-2026-55551 ZAC: Missing per-zaaktype authorization on by-ID decision and process reads

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

CLEANSTART-2026-QS50818 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

CVE-2026-41907 affects multiple packages. uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. See references for individual vulnerability details...

CLEANSTART-2026-RZ17218 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

CVE-2026-41907 affects multiple packages. uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. See references for individual vulnerability details...

PT-2026-133685

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...

PT-2026-134183

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completion openai and returns through the openai-compatible branch before UserCanvasService.accessible checks whether the caller may access the requested...

CVE-2026-82411

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

CVE-2026-82411

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint "GET...

CVE-2026-82411 Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

CVE-2026-82411

The Open Object platform is vulnerable to a cross-object-type authorization bypass in the history-detail endpoint (GET /api/v2/objects/{uuid}/{index}). The flaw exists because the history_detail action in src/objects/api/v2/views.py calls self.get_queryset() and get_object_or_404 directly, bypass...

EUVD-2026-112551

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

CVE-2026-82411 Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

CVE-2026-82411 Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

Maykin Open Object authorization issue vulnerability

Versions 2.4.3 through 2.5.1, 3.0.0 through 3.6.2, 4.0.0-rc.1 through 4.0.2, and 4.1.0 through 4.1.1 of Maykin Open Object contain an authorization issue vulnerability. This vulnerability arises because the history-detail endpoint fails to perform object-level permission checks. Only valid API...

PT-2026-129225

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...