https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T16:52:34.484492+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113594 CVE-2026-113594 — Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route 2026-10-22T16:52:34.486537+00:00

Affected: sharkord

Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGE_SETTINGS permission. Attackers can set a join password, disable registration, zero upload limits, or toggle plugin loading to deny service to other members.