Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:09:53 +0000 fkie_cve-2026-72741 https://db.gcve.eu/vuln/fkie_cve-2026-72741 <p>Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise&#39;s tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise&#39;s services, plugins, environment variables, and certificates.</p> <p>Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise&#39;s tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise&#39;s services, plugins, environment variables, and certificates.</p> https://db.gcve.eu/vuln/fkie_cve-2026-72741 GHSA-5xhp-2v8r-m7wh https://db.gcve.eu/vuln/ghsa-5xhp-2v8r-m7wh <p>Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise&#39;s tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise&#39;s services, plugins, environment variables, and certificates.</p> <p>Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise&#39;s tenant name in URL paths. Attackers can use any valid API token to bypass enterprise ID verification and access or modify another enterprise&#39;s services, plugins, environment variables, and certificates.</p> https://db.gcve.eu/vuln/ghsa-5xhp-2v8r-m7wh