CVE-2026-40314

NamelessMC is website software for Minecraft servers. In version 2.2.4,"core/classes/Misc/ProfilePostReactionContext.php" only verifies that the wall post exists and does not enforce blocked/private-profile visibility. "modules/Core/queries/reactions.php" allows unauthenticated GET requests for...