CGA-2V28-9JF9-HRQC

Bulletin has no description...

CVE-2026-42889

Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...

CVE-2026-42889 Relay Server WebSocket authentication bypass when token is omitted

Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...

CVE-2026-42889

Summary (CVE-2026-42889): Relay Server (used with Obsidian) versions 0.9.0–0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were treated as having full server permissions, all...

MINI-4H23-67GQ-XPVW

Bulletin has no description...

MINI-3XGC-53CX-FF5F

Bulletin has no description...

MINI-3Q3M-F8VH-FCC8

Bulletin has no description...

Logged-in user bypasses share password and download restrictions on Text attachments via documentId

None...

MINI-W737-RP7H-6X4Q

Bulletin has no description...

MINI-VW74-24FX-VMMF

Bulletin has no description...

MINI-V3QQ-HQPF-8V99

Bulletin has no description...

MINI-PQ2M-J5PR-C4QM

Bulletin has no description...

MINI-3673-3WXJ-CWPM

Bulletin has no description...

MINI-8HWM-VGV3-4957

Bulletin has no description...

MINI-86QW-WX92-PXJR

Bulletin has no description...

MINI-24J5-V4M9-MHVP

Bulletin has no description...

EUVD-2026-29358

Reserved. Details will be published at disclosure...

EUVD-2026-29355

Reserved. Details will be published at disclosure...

Relay Server 安全漏洞

Relay Server is an open-source system by System 3 that supports offline collaborative real-time document synchronization. There were security vulnerabilities in the Relay Server versions 0.9.0 to 0.9.6. These vulnerabilities stemmed from WebSocket endpoints for multiple documents, where WebSocket...

PT-2026-40422

Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...