Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 17:08:19 +0000 CVE-2026-111722 — LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API https://db.gcve.eu/vuln/cve-2026-111722 <p><strong>Affected:</strong> LingGuoAI LingGuo-Drama</p> <p>LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users&#39; projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite, reassign or delete any user&#39;s short-drama projects.</p> <p><strong>Affected:</strong> LingGuoAI LingGuo-Drama</p> <p>LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users&#39; projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite, reassign or delete any user&#39;s short-drama projects.</p> https://db.gcve.eu/vuln/cve-2026-111722