https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 06:56:06 +0000 https://db.gcve.eu/vuln/cve-2026-119596 <p><strong>Affected:</strong> HDInnovations UNIT3D</p> <p>UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated users to download other members&#39; private playlists. Attackers can enumerate sequential playlist ids at the /playlist-zips/{playlist} endpoint to obtain zips of all torrents, disclosing private collection membership.</p> <p><strong>Affected:</strong> HDInnovations UNIT3D</p> <p>UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated users to download other members&#39; private playlists. Attackers can enumerate sequential playlist ids at the /playlist-zips/{playlist} endpoint to obtain zips of all torrents, disclosing private collection membership.</p> https://db.gcve.eu/vuln/cve-2026-119596