https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T19:55:22.349494+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111350 CVE-2026-111350 — Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API 2026-10-16T19:55:22.351479+00:00

Affected: Papermark

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.