CVE-2026-119763

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...

CVE-2026-119763 changelog.com before commit 7b35e829 Missing Authorization via Preview Routes

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...

EUVD-2026-114240

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...

CVE-2026-119763

The software changelog.com (prior to commit 7b35e829 ) is susceptible to a missing authorization vulnerability (CWE-862). This flaw allows unauthenticated attackers to access unpublished content through preview routes within the PostController , NewsIssueController , and NewsItemController . By e...

CVE-2026-119763: thechangelog changelog.com: changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated…

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attackers can enumerate hashid post IDs, sequential newsletter...