https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:42:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-1436 <p><strong>Affected:</strong> Graylog Web Interface</p> <p>Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user&#39;s profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive third-party information to be accessed, such as names, email addresses, internal identifiers, and last activity. The endpoint &#39;http://&lt;IP&gt;:12900/users/&lt;my_user&gt;&#39; does not implement object-level authorization validations.</p> <p><strong>Affected:</strong> Graylog Web Interface</p> <p>Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user&#39;s profiles without proper authorization checks. Exploiting this vulnerability allows valid users of the system to be listed and sensitive third-party information to be accessed, such as names, email addresses, internal identifiers, and last activity. The endpoint &#39;http://&lt;IP&gt;:12900/users/&lt;my_user&gt;&#39; does not implement object-level authorization validations.</p> https://cve.radiocsirt.org/vuln/cve-2026-1436