https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T05:05:22.990511+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111680 CVE-2026-111680 — APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter 2026-10-20T05:05:22.991137+00:00

Affected: APIParkLab APIPark

APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services and /api/v1/simple/apps to read, modify, or delete other teams' services and applications via /api/v1/service/info and /api/v1/app endpoints.