CVE-2026-50886

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-50886

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-50886

Summary: CVE-2026-50886 describes an access-control flaw in the webhook management component of Project Firefly III (version 6.5.9). The root cause is an incorrect access-control implementation, enabling an attacker to scan internal resources by sending a crafted POST request. Affected software: ...

PT-2026-49327

Name of the Vulnerable Software and Affected Versions Project Firefly III version 6.5.9 Description Incorrect access control in the webhook management component allows attackers to scan internal resources by sending a crafted POST request. Recommendations At the moment, there is no information...

Incorrect Authorization

Overview grumpydictator/firefly-iii is a personal finances manager. Affected versions of this package are vulnerable to Incorrect Authorization via the index and show functions in the user management API endpoints, which lack proper role verification. An attacker can access sensitive information...

EUVD-2021-2235

Malware in sbrugna...

EUVD-2021-2376

Malware in sbrugna...

EUVD-2021-2086

Malware in sbrugna...

EUVD-2021-1958

Malware in sbrugna...

EUVD-2021-2160

Malware in sbrugna...

EUVD-2019-5826

Malware in sbrugna...

EUVD-2019-5828

Malware in sbrugna...

EUVD-2021-2518

Malware in sbrugna...

EUVD-2021-2531

Malware in sbrugna...

EUVD-2021-1572

Malware in sbrugna...

EUVD-2021-1937

Malware in sbrugna...

EUVD-2021-1725

Malware in sbrugna...

EUVD-2021-1674

Malware in sbrugna...

EUVD-2021-2255

Malware in sbrugna...

EUVD-2019-5827

Malware in sbrugna...