CVE-2026-65840

The Fider feedback portal (versions prior to 0.36.0 ) contains a critical authorization bypass in multi-tenant mode (HOST_MODE=multi). The vulnerability exists because the getVerificationByKey function fails to filter by tenant_id, allowing an attacker to use an email verification key from Tenant...