https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-09T01:12:37.422586+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-38470 fkie_cve-2026-38470 2026-10-09T01:12:37.441237+00:00

A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created API token.

 https://db.gcve.eu/vuln/ghsa-55f9-r7cc-h5pv GHSA-55f9-r7cc-h5pv 2026-10-09T01:12:37.441314+00:00

A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created API token.