https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T03:06:36.278198+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92469 fkie_cve-2026-92469 2026-11-06T03:06:36.279359+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and delete arbitrary users' files and metadata by supplying their identifiers to the delete endpoint.

 https://db.gcve.eu/vuln/ghsa-x7gm-hm27-4pgr GHSA-x7gm-hm27-4pgr 2026-11-06T03:06:36.279440+00:00

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} endpoint that performs no ownership validation. Authenticated attackers can enumerate file identifiers via GET /files and delete arbitrary users' files and metadata by supplying their identifiers to the delete endpoint.