CVE-2026-111664

Safing Portmaster versions prior to 2.2.5 are vulnerable to a missing authorization issue. Unprivileged local processes can call the POST /api/v1/updates/from-url endpoint, which is registered with api.PermitAnyone. This allows an attacker to provide an attacker-controlled index URL to bypass ver...

CVE-2026-111658

SiteServer SSCMS versions through 7.4.0 are vulnerable to a cross-site authorization bypass within the ChannelsController . The flaw allows site-scoped administrators to access channels belonging to other sites by providing foreign channel IDs. Consequently, an attacker with Channels permission o...

CVE-2026-111658 SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API

SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can read and overwrite another site's channel...

CVE-2026-111653

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when ISSAAS is true, attackers can enumerate sequential...

EUVD-2026-103075

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when ISSAAS is true, attackers can enumerate sequential...

CVE-2026-111653

The 53AIHub application (versions through 0.5.3 ) is vulnerable to a missing authentication flaw in the /api/enterprises/:id endpoint. The root cause is that the UpdateEnterprise function only enforces authentication checks when the IS_SAAS flag is true. Consequently, unauthenticated attackers ca...

CVE-2026-111653 53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when ISSAAS is true, attackers can enumerate sequential...

CVE-2026-111653 53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when ISSAAS is true, attackers can enumerate sequential...

CVE-2026-111653 53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when ISSAAS is true, attackers can enumerate sequential...

CVE-2026-111650 ChronoFrame through 1.0.0 Missing Authentication via Setup Wizard API

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

CVE-2026-111650 ChronoFrame through 1.0.0 Missing Authentication via Setup Wizard API

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

CVE-2026-111650

ChronoFrame versions through 1.0.0 are vulnerable to a missing authentication flaw in the server/api/wizard/ handlers. An unauthenticated attacker can exploit this by sending a POST request to /api/wizard/storage, enabling them to reconfigure existing instances. This allows for the activation of ...

EUVD-2026-103072

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

CVE-2026-111650 ChronoFrame through 1.0.0 Missing Authentication via Setup Wizard API

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

CVE-2026-111650

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

CVE-2026-111646 SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/attachmentId. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks i...

CVE-2026-111646 SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/attachmentId. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks i...

CVE-2026-111646

SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/attachmentId. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks i...

CVE-2026-111646 SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/attachmentId. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks i...

CVE-2026-111646

SurveyKing versions before 1.13.0 are vulnerable to an unauthenticated file download flaw due to missing authorization. Attackers can exploit the GET /api/public/preview/{attachmentId} endpoint to bypass shared, owner, and project checks within FileServiceImpl.loadFile . By knowing or deriving ti...