https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T07:51:34.459982+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-125388 fkie_cve-2026-125388 2026-11-13T07:51:34.463319+00:00

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every submission as an XLSX file, disclosing submissions they are not permitted to see.

 https://db.gcve.eu/vuln/ghsa-mp2v-gg3m-qvpx GHSA-mp2v-gg3m-qvpx 2026-11-13T07:51:34.463406+00:00

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every submission as an XLSX file, disclosing submissions they are not permitted to see.