https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:08:18 +0000 https://db.gcve.eu/vuln/cve-2026-111630 <p><strong>Affected:</strong> colinin abp-next-admin</p> <p>abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users&#39; AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call ChatAppService.GetListAsync or SendMessageAsync with a victim&#39;s ConversationId GUID to read chat messages and inject messages into that conversation.</p> <p><strong>Affected:</strong> colinin abp-next-admin</p> <p>abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users&#39; AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call ChatAppService.GetListAsync or SendMessageAsync with a victim&#39;s ConversationId GUID to read chat messages and inject messages into that conversation.</p> https://db.gcve.eu/vuln/cve-2026-111630