PYSEC-2026-3422 wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup

Summary Three nutritionalvalues action endpoints fetch objects via Model.objects.getpk=pk — a raw ORM call that bypasses the user-scoped queryset. Any authenticated user can read another user's private nutrition plan data, including caloric intake and full macro breakdown, by supplying an arbitra...

Fortinet FortiVoice security vulnerability

Fortinet FortiVoice is a network communications solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiVoice that originates from an authorization bypass via a user-controlled key vulnerability that allows an authenticated attacker to read another user's SIP configuration v...