1 matches found
CVE-2026-23964
Mastodon vendor: Mastodon server (ActivityPub). Vulnerability CVE-2026-23964 is an insecure direct object reference in the web push subscription update endpoint affecting versions < 4.5.5, < 4.4.12, and
6.5CVSS5.6AI score0.00195EPSS
SaveExploits0References4Affected Software1
20