https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T18:17:01.030260+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111701 CVE-2026-111701 — OtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API 2026-10-20T18:17:01.031702+00:00

Affected: OtterMind Nubase

OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /storage/v1/object/{bucketId}/{path} is treated as public for every HTTP method. Attackers knowing a tenant subdomain, bucket id and object path can download objects from private buckets and delete stored objects without an apikey or JWT.