https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:08:19 +0000 https://db.gcve.eu/vuln/cve-2026-111684 <p><strong>Affected:</strong> absmach magistrala</p> <p>Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants&#39; device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants&#39; devices, disclose certificates, and mint CA-signed certificates for their device ids.</p> <p><strong>Affected:</strong> absmach magistrala</p> <p>Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants&#39; device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants&#39; devices, disclose certificates, and mint CA-signed certificates for their device ids.</p> https://db.gcve.eu/vuln/cve-2026-111684