https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:44:49 +0000 https://cve.radiocsirt.org/vuln/cve-2026-59704 <p><strong>Affected:</strong> Cap</p> <p>Cap&#39;s GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner&#39;s credits without consent.</p> <p><strong>Affected:</strong> Cap</p> <p>Cap&#39;s GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner&#39;s credits without consent.</p> https://cve.radiocsirt.org/vuln/cve-2026-59704