https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:48:08.330420+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92567 fkie_cve-2026-92567 2026-09-28T09:48:08.344606+00:00

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify arbitrary form responses containing personal data by sending update requests without ownership validation.

 https://db.gcve.eu/vuln/ghsa-cxpf-jm7w-39v7 GHSA-cxpf-jm7w-39v7 2026-09-28T09:48:08.344696+00:00

TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submission identifiers allocated in narrow ranges and modify arbitrary form responses containing personal data by sending update requests without ownership validation.