https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:28:01 +0000 https://db.gcve.eu/vuln/cve-2026-108853 <p><strong>Affected:</strong> UnicomAI Wanwu</p> <p>UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants&#39; agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims&#39; applications, workflows, conversations, and associated data.</p> <p><strong>Affected:</strong> UnicomAI Wanwu</p> <p>UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants&#39; agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed sequential assistant IDs to permanently delete victims&#39; applications, workflows, conversations, and associated data.</p> https://db.gcve.eu/vuln/cve-2026-108853