379 matches found
PT-2026-96253
Name of the Vulnerable Software and Affected Versions MaxKB versions 2.0.0 through 2.10.2-lts Description An authorization flaw exists in the document and paragraph operation routes. The system validates the knowledge id in the request path but fails to verify if the target Document, identified b...
EUVD-2026-65352
The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...
CVE-2026-72691
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...
MINI-RQ38-PHV8-J899
Bulletin has no description...
ECHO-996A-0359-856A
Bulletin has no description...
ECHO-5628-D076-3B4E
Bulletin has no description...
MINI-R224-823J-74F2
Bulletin has no description...
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
MINI-9G2Q-554G-GF39
Bulletin has no description...
MINI-4HR8-C2M5-6945
Bulletin has no description...
MINI-8RQG-VHVG-WQ2V
Bulletin has no description...
MINI-PF9M-W6HG-9M75
Bulletin has no description...
CGA-JJJX-R7M6-9WGP
Bulletin has no description...
MINI-F3Q5-7XGG-G49M
Bulletin has no description...
MINI-GX44-PMRG-J57V
Bulletin has no description...
CVE-2026-54022 Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs b...
EUVD-2026-38521
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs b...
CVE-2026-54022 Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the documentid starts with note: colon. However, the YdocManager storage layer normalizes all document IDs b...