https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:51.659172+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-72741 fkie_cve-2026-72741 2026-09-30T23:09:51.677852+00:00

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise's services, plugins, environment variables, and certificates.

 https://db.gcve.eu/vuln/ghsa-5xhp-2v8r-m7wh GHSA-5xhp-2v8r-m7wh 2026-09-30T23:09:51.677923+00:00

Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise's services, plugins, environment variables, and certificates.