https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T18:22:33.633768+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110230 CVE-2026-110230 — XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint 2026-10-14T18:22:33.636118+00:00

Affected: sergix44 XBackBone

XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity route. Attackers can supply sequential upload ids to MediaController::createVanity() to break existing share links and hijack the freed codes with their own uploads.