https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T15:27:11.208201+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111655 fkie_cve-2026-111655 2026-10-19T15:27:11.548343+00:00

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with columns like xurl, hash, or uuid to view download URLs, tamper records, or reassign ownership.

 https://db.gcve.eu/vuln/ghsa-wcpc-prgf-22hq GHSA-wcpc-prgf-22hq 2026-10-19T15:27:11.548425+00:00

ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with columns like xurl, hash, or uuid to view download URLs, tamper records, or reassign ownership.