CVE-2026-18258 Authorization Bypass Through User-Controlled Key in eScriptorium

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are...

PT-2026-68609

Name of the Vulnerable Software and Affected Versions Scripta/eScriptorium versions prior to 26.04.2 Description An authorization bypass exists in the 'Line', 'LineTranscription', 'VirtualCollection', 'tag', and 'process' API endpoints. This issue allows a remote authenticated user to read, modif...