Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 05:19:07 +0000 fkie_cve-2026-105039 https://db.gcve.eu/vuln/fkie_cve-2026-105039 <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> https://db.gcve.eu/vuln/fkie_cve-2026-105039 GCVE-1337-2026-00000000000000111111111111111111111000000000000000000011111100111111111111000000000000000000011111111111111101010000000000000010011 — EnergizeLab Station Middleware Admin APIs Missing Role Checks https://db.gcve.eu/vuln/gcve-1337-2026-00000000000000111111111111111111111000000000000000000011111100111111111111000000000000000000011111111111111101010000000000000010011 <p><strong>Affected:</strong> EnergizeLab station-middleware</p> <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> <p><strong>Affected:</strong> EnergizeLab station-middleware</p> <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> https://db.gcve.eu/vuln/gcve-1337-2026-00000000000000111111111111111111111000000000000000000011111100111111111111000000000000000000011111111111111101010000000000000010011 GHSA-mhf9-fr35-f2j3 https://db.gcve.eu/vuln/ghsa-mhf9-fr35-f2j3 <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> <p>EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.</p> https://db.gcve.eu/vuln/ghsa-mhf9-fr35-f2j3