https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:23:05.990651+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-101033 CVE-2026-101033 — KitchenOwl through 0.7.10 IDOR via unchecked category ID 2026-09-28T16:23:05.991943+00:00

Affected: TomBursch kitchenowl

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, and colors, breaking household isolation.