https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:08:50 +0000 https://db.gcve.eu/vuln/cve-2026-111716 <p><strong>Affected:</strong> nduckmink arkon</p> <p>Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments&#39; sources because by-id routes in app/routers/sources.py skip can_access_document. Attackers can call the plan, progress, PATCH, retry and approve-extraction routes with foreign source IDs to disclose derived wiki titles and summaries and alter ingestion state.</p> <p><strong>Affected:</strong> nduckmink arkon</p> <p>Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments&#39; sources because by-id routes in app/routers/sources.py skip can_access_document. Attackers can call the plan, progress, PATCH, retry and approve-extraction routes with foreign source IDs to disclose derived wiki titles and summaries and alter ingestion state.</p> https://db.gcve.eu/vuln/cve-2026-111716