Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 11:32:52 +0000 CVE-2026-124653 — Mine CloudVod < 2.6.6 - Unauthenticated Cloud Storage Credential Disclosure https://db.gcve.eu/vuln/cve-2026-124653 <p><strong>Affected:</strong> Unknown Mine CloudVod</p> <p>The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site&#39;s configured Alibaba Cloud OSS, Tencent Cloud COS and Dogecloud accounts and use them to upload or overwrite files in the site&#39;s storage.</p> <p><strong>Affected:</strong> Unknown Mine CloudVod</p> <p>The Mine CloudVod WordPress plugin before 2.6.6 does not restrict who can request cloud storage upload credentials from several of its REST API routes, allowing unauthenticated attackers to obtain signed upload policies and temporary credentials for the site&#39;s configured Alibaba Cloud OSS, Tencent Cloud COS and Dogecloud accounts and use them to upload or overwrite files in the site&#39;s storage.</p> https://db.gcve.eu/vuln/cve-2026-124653