CVE-2026-65013-BOLA-IDOR

CVE-2026-65013-BOLA-IDOR Воспроизводимый PoCBOLA / IDOR в API tRPC от Onlook CVE-2026-65013. Любой аутентифицированный пользователь может читать, изменять и удалять проекты, участников и историю ИИ других пользователей, просто передав их UUID в процедуры tRPC версии = 0.2.32. | ---|--- CVE|...

CVE-2026-100616

capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the public.orgs table permits an organization admin a user holding org.updatesettings to update the entire row, including the internal billing pointer column...

EUVD-2026-87714

Capgo capgo.app blocks direct user inserts into the public.manifest table with a RESTRICTIVE row-level security policy, but that restriction can be bypassed indirectly. A principal holding an app-scoped upload/write/all API key upload+ rights or an authenticated user with write+ rights on an app...

EUVD-2026-87711

capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the public.orgs table permits an organization admin a user holding org.updatesettings to update the entire row, including the internal billing pointer column...

CVE-2026-100616

The capgo.app over-the-air update platform is vulnerable to an authentication bypass due to insecure row-level security (RLS) policies on the public.orgs table. Specifically, an authenticated organization admin with org.update_settings permissions can bypass the official update endpoint's restric...

PT-2026-99287

Name of the Vulnerable Software and Affected Versions capgo.app affected versions not specified Description An issue exists in the row-level security UPDATE policy on the public.orgs table. An authenticated organization administrator with org.update settings permissions can bypass the official...

PT-2026-99290

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description An indirect bypass of the row-level security policy exists in the public.manifest table. A user or principal with app-scoped upload, write, or all API keys, or an authenticated user...

CVE-2026-62247 Supabase Realtime: Incorrect Authorization

Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not correctly honor the per-extension presence.read row-level security policy when a private-channel client is allowed presence.write but explicitly denied...

PT-2026-96235

Name of the Vulnerable Software and Affected Versions Supabase Realtime versions prior to 2.111.2 Description Realtime authorization fails to correctly honor the per-extension presence.read row-level security policy. This occurs when a private-channel client is granted presence.write permissions...

CVE-2026-62247: Incorrect Authorization

Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not correctly honor the per-extension presence.read row-level security policy when a private-channel client is allowed presence.write but explicitly denied...

CVE-2026-77239

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

EUVD-2026-83178

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

CVE-2026-77239 WACRM: Service-role routes missing a role check

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

CVE-2026-77239 WACRM: Service-role routes missing a role check

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

CVE-2026-77240 WACRM: Database-layer authorization bypasses

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profilesupdate row-level security policy in supabase/migrations/017accountsharing.sql permits authenticated users to modify their own accountrole and accountid, allowing a viewer to self-promote or move into...

CVE-2026-77239: Improper Authorization

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database client that bypasses row-level security. In src/app/api/flows/id/route.ts,...

CVE-2026-54180 backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder operations resolve records from the unscoped model query inste...

EUVD-2026-77717

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder operations resolve records from the unscoped model query inste...

auth v2.197.0

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

CVE-2026-85693

Chatbot UI (open-source chat application) contains an authorization bypass in its retrieval endpoint (/api/retrieval/retrieve). The root cause is a service-role Supabase client that bypasses row-level security and fails to validate file ownership, allowing any authenticated user to retrieve index...