https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T21:47:59.422868+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116018 CVE-2026-116018 — ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint 2026-10-25T21:47:59.424277+00:00

Affected: ONEARMY community-platform

ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification IDs to suppress unread indicators of users in the same tenant, causing them to miss replies, comments and new-content notices.