CVE-2026-117562

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.storyget endpoint. Because UnionStory.getbyfeedoffset ignores the onlypublish flag, attackers can enumerate feed IDs...

CVE-2026-117562 rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.storyget endpoint. Because UnionStory.getbyfeedoffset ignores the onlypublish flag, attackers can enumerate feed IDs...

CVE-2026-117562 rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.storyget endpoint. Because UnionStory.getbyfeedoffset ignores the onlypublish flag, attackers can enumerate feed IDs...

CVE-2026-117562

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.storyget endpoint. Because UnionStory.getbyfeedoffset ignores the onlypublish flag, attackers can enumerate feed IDs...

EUVD-2026-110840

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.storyget endpoint. Because UnionStory.getbyfeedoffset ignores the onlypublish flag, attackers can enumerate feed IDs...

CVE-2026-117562

The software rssant versions 1.9.0 through 1.9.1 is vulnerable to an authorization bypass vulnerability via the anonymous publish.story_get endpoint. The root cause is that the UnionStory.get_by_feed_offset function fails to check the only_publish flag. This allows unauthenticated attackers to en...

PT-2026-126421

rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story get endpoint. Because UnionStory.get by feed offset ignores the only publish flag, attackers can enumerate fee...