https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T12:15:56.956613+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111683 CVE-2026-111683 — Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API 2026-10-25T12:15:56.958022+00:00

Affected: allegro ralph

Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/<id> and /api/server_room/<id> to read asset hostnames, serials and management IPs, and to modify, move or create racks.