https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T16:40:15.290974+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111653 CVE-2026-111653 — 53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id 2026-10-19T16:40:15.291976+00:00

Affected: 53AIHub

53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when IS_SAAS is true, attackers can enumerate sequential enterprise IDs and overwrite logos, display names and branding for defacement and phishing.