CVE-2026-55066 Vikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Vikunja is an open-source self-hosted task management platform. Prior to 2.4.0, POST /api/v1/projects/project/views/view/buckets/bucket/tasks accepts a body supplied taskid but TaskBucket.CanUpdate in pkg/models/kanbantaskbucket.go authorizes only the project, view, and bucket from the URL...

CVE-2026-82290

Chainlit through version 2.12.0 fails to validate ownership of feedback records in its PUT and DELETE endpoints. The root cause is a missing ownership check, allowing authenticated attackers to delete or modify other users' feedback by supplying arbitrary feedback identifiers. The practical conse...

EUVD-2026-67821

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation...

EUVD-2026-67814

VoltAgent through 2.1.20 fails to validate conversation ownership in memory API handlers, allowing authenticated users to access other users' conversations. Attackers can read, modify, and delete arbitrary conversations and messages by supplying caller-controlled identifiers to memory endpoints...

EUVD-2026-67802

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users'...

CVE-2026-81299

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-61946-Easy-Appointments-IDOR

CVE-2026-61946: Da un ID Appuntamento alla Prenotazione di Qualcun Altro Ho trovato un riferimento diretto a oggetti insicuro IDOR, sfruttabile senza autenticazione, nel plugin WordPress Easy Appointments. L'endpoint pubblico di prenotazione accettava un id dalla query string e passava i dati...

CVE-2026-1375

CVE-2026-1375: Tutor LMS प्लगइन में प्रमाणित IDOR / टूटा एक्सेस नियंत्रण अस्वीकरण: यह रिपॉजिटरी केवल शैक्षिक उद्देश्यों और नैतिक प्रकटीकरण के लिए बनाई गई है। यह भेद्यता विक्रेता को जिम्मेदारीपूर्वक सूचित कर दी गई है और इसे पैच कर दिया गया है। उचित प्राधिकरण के बिना सिस्टम का शोषण करने के लिए इस...

CVE-2026-6355

Augmentt: Accesso Cross-Tenant tramite IDOR Crediti Questa CVE è il risultato di uno sforzo collaborativo tra: Raznov – GitHub: https://github.com/basraznov HelloWorld Autore– GitHub: https://github.com/Penquinsecq Descrizione Una vulnerabilità nell'applicazione web consente a utenti non...

bug-bounty-findings-o-research-disclosures.

Segnalazioni di bug bounty o divulgazioni di ricerca. Bug Bounty: CVE-2023-50839 IDOR identificato in un componente di supporto di terze parti tramite 'gau' e 'Nuclei'. Nonostante i reindirizzamenti perimetrali, il software obsoleto è rimasto esposto. Confermato tramite analisi manuale degli...

CVE-2025-66954

CVE-2025-66954 – Enumerazione Username su Buffalo LinkStation tramite IDOR Sommario Una vulnerabilità nel firmware Buffalo LinkStation versione 1.85-0.01 consente a utenti non autenticati o con accesso ospite di enumerare username validi e i relativi ruoli associati. Il problema deriva da un...

CVE-2025-65094

CVE-2025-65094: WBCE CMS è vulnerabile all'escalation dei privilegi tramite manipolazione dell'ID del gruppo IDOR Panoramica Campo| Dettagli ---|--- CVE ID| CVE-2025-65094 Gravità| ALTA Avviso| Visualizza avviso Scoperto da| Lukasz Rybak Prodotti interessati WBCE/WBCECMS Dettagli Riepilogo Un...

CVE-2026-81299

CVE-2026-81299 affects the WordPress WP Job Portal plugin, versions

CVE-2026-81299 WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

EUVD-2026-67729

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

Cve-2026-39676

Cve-2026-39676 Wordpress Versione: Download Manager 3.3.5.2 Titolo: Autorizzazione Mancante - Exploit IDOR non autenticato...

CVE-2026-25197

CVE-2026-25197: Autorisierungsbypass über benutzergesteuerten Schlüssel IDOR Sicherheitshinweis Feld| Wert ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Kritisch Vektor| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Autorisierungsbypass über benutzergesteuert...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Vulnerabilità di sicurezza: IDOR Insecure Direct Object Reference Componente interessato: endpoint di caricamento dell'immagine del profilo, controller teammembers Software: RISE - Ultimate Project Manager & CRM Venditore: codecanyon Versione:...

CVE-2026-14871

CVE-2026-14871 - BOLA / IDOR in osTicket ajax.tickets.php Broken Object Level Authorization BOLA: Insecure Direct Object Reference IDOR include/ajax.tickets.php → viewField Funktion Gemeldet von @JF0x0r · 27. März 2026 Status: GEPATCHT - Fix veröffentlicht in osTicket v1.17.8 / v1.18.4 Auf einen...

CVE-2026-79995

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...