https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:59:01.209822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56773 CVE-2026-56773 — Teable - Missing Authorization in v2 REST API 2026-10-17T11:59:01.228071+00:00

Affected: teableio teable

Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET /api/v2/tables/get and POST /api/v2/tables/updateRecords.