https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T17:08:17.317124+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111708 CVE-2026-111708 — WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup 2026-10-20T17:08:17.327007+00:00

Affected: canove whaticket-community

WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.