PT-2026-39748

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions prior to 2.32.2 Description An issue exists in the 'GET /api/libraries/:id/download' endpoint where the system validates if a user has access to the library specified in the URL path but fails to constrain the fetched...

CVE-2025-62086

The CVE-2025-62086 entry corresponds to a WordPress plugin issue: Яндекс Доставка (Boxberry) for WordPress, vulnerable to Missing Authorization/Broken Access Control in versions up to 2.32 (some sources list fixes up to 2.34). Root cause is misconfigured access control allowing unauthorized acces...