CVE-2026-82290 Chainlit Feedback Endpoints Missing Ownership Validation

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation...

CVE-2026-82284

Quivr versions through 0.0.322 contain a missing ownership validation flaw in three chat API endpoints: GET /chat/{chat_id}/history, DELETE /chat/{chat_id}, and POST /chat/{chat_id}/question/answer. An authenticated attacker can leverage this to read other users' conversation histories (including...

CVE-2026-82283

VoltAgent through 2.1.20 contains an authorization flaw in its memory API handlers , which fail to validate conversation ownership . An authenticated attacker can supply caller-controlled identifiers to memory endpoints to read, modify, or delete conversations and messages belonging to other user...

CVE-2026-82283 VoltAgent Memory API Handlers Missing Ownership Checks

VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints...

CVE-2026-82281

Kotaemon (by Cinnamon) through 0.12.0 is affected by a missing ownership validation in the select_conv , delete_conv , rename_conv , and on_set_public_conversation functions within libs/ktem/ktem/pages/chat/control.py. An unauthenticated attacker with no privileges required can supply arbitrary c...

CVE-2026-82258

SvelteKit versions from 2.38.0 up to (but not including) 2.60.1 are affected by a race condition in the query.batch feature. Under specific timing conditions, concurrent requests from different users can merge under a single request context, allowing an attacker to access sensitive data from othe...

CVE-2026-78047

CVE-2026-78047 is a stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature (also referenced as "Scheduled Report Task" in the CNA record). A low-privileged authenticated administrator can inject arbitrary HTML or JavaScript into the scheduling fields, an...

CVE-2026-81819

Affected versions of Flowintel expose the /myassignment/user API endpoint to any authenticated API user. The endpoint accepts a userid parameter identifying the user whose assignments should be returned, but previously had no role restriction beyond general API authentication. As a result, a...

CVE-2026-81819 Flowintel Missing Authorization Allows Regular API Users to View Other Users’ Task Assignments

Affected versions of Flowintel expose the /myassignment/user API endpoint to any authenticated API user. The endpoint accepts a userid parameter identifying the user whose assignments should be returned, but previously had no role restriction beyond general API authentication. As a result, a...

CVE-2026-81819

Flowintel versions >=3.3.0 expose the /my_assignment/user API endpoint with only general API authentication, lacking a role-specific restriction. The endpoint accepts a user_id parameter to return that user's task assignments, but previously allowed any authenticated user to query it. As a res...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Vulnerabilidade de Vazamento de Dados HTTP/2 do Apache Tomcat Visão Geral CVE-2024-52317 é uma vulnerabilidade que afeta a implementação HTTP/2 do Apache Tomcat. O problema surge devido à reciclagem inadequada de recursos de requisição e resposta HTTP/2,...

CVE-2026-74848 Apache APISIX: Cross-user response poisoning in serverless plugins

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

CVE-2026-74848

Apache APISIX is vulnerable to an HTTP Request/Response Smuggling flaw in serverless-plugin routes , allowing an unauthenticated network attacker to cause other clients to receive attacker-chosen or cross-user responses. The issue affects versions 2.12.0 through 3.17.0 and is fixed in version 3.1...

CVE-2026-33555

Bypass della Validazione del Body FIN Standalone in HAProxy H3/QUIC tramite HTTP Request Smuggling Post completo qui : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Riepilogo Una vulnerabilità nell'implementazione HTTP/3 di HAProxy consente a un attaccante di...

CVE-2025-46818

CVE-2025-46818 – Redis Lua-Sandbox-Cross-User-Escape Sandbox-Escape über veraltete Lua-APIs und veränderbare Metatables auf Redis 8.2.1. Überblick Redis 8.2.1 hält veraltete Lua-Builtins getfenv, setfenv, newproxy für Skripte verfügbar und versäumt es, Metatables für Basistypen zu sperren. Ein...

CVE-2026-77035

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

EUVD-2026-66863

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...