2 matches found
CVE-2026-42202
nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint POST/nova-vendor/nova-toggle/toggle/resource/resourceId was protected only by web + auth: middleware. Any user authenticated on the configured guard could call the endpoint and flip boolean attributes...
7.1CVSS5.8AI score0.00201EPSS
SaveExploits0References6
CVE-2026-42202: Improper Authorization
nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint POST/nova-vendor/nova-toggle/toggle/resource/resourceId was protected only by web + auth: middleware. Any user authenticated on the configured guard could call the endpoint and flip boolean attributes...
6.5CVSS5.9AI score0.00201EPSS
SaveExploits0References2
20