8 matches found
CVE-2026-92765
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
CVE-2026-92765 ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
EUVD-2026-81033
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
CVE-2026-92765 ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
CVE-2026-92765
ArcherySec through version 2.0.6 contains an information disclosure vulnerability in the WebScanVulnList endpoint. The root cause is a failure to validate organization ownership, allowing any authenticated user to supply arbitrary scan identifiers and retrieve complete web vulnerability data —inc...
CVE-2026-92765 ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
CVE-2026-92765: Authorization Bypass Through User-Controlled Key
ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vulnerability findings from other organizations. Attackers can supply arbitrary scan identifiers to retrieve complete web vulnerability data including titles,...
PT-2026-94047
Name of the Vulnerable Software and Affected Versions ArcherySec versions prior to 2.0.7 Description Authenticated users can read vulnerability findings from other organizations due to a failure to validate organization ownership in the 'WebScanVulnList' endpoint. By supplying arbitrary scan...