https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:55:45.271856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364003 EUVD-2026-364003 2026-10-05T08:55:45.320543+00:00 EUVD-2026-364003 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85619 fkie_cve-2026-85619 2026-10-05T08:55:45.320581+00:00

AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across workspaces. Attackers can supply a victim's object ID with their own workspace ID to bypass access controls and read, modify, or delete cross-workspace data.

 https://cve.radiocsirt.org/vuln/ghsa-7jw5-c6mp-q4xf GHSA-7jw5-c6mp-q4xf 2026-10-05T08:55:45.320616+00:00

AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to access documents and database rows across workspaces. Attackers can supply a victim's object ID with their own workspace ID to bypass access controls and read, modify, or delete cross-workspace data.