https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 08:30:14 +0000 https://db.gcve.eu/vuln/cve-2026-115725 <p><strong>Affected:</strong> chatwoot</p> <p>Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with another account&#39;s source_id to create or retrieve conversations and post messages to that account&#39;s contacts.</p> <p><strong>Affected:</strong> chatwoot</p> <p>Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with another account&#39;s source_id to create or retrieve conversations and post messages to that account&#39;s contacts.</p> https://db.gcve.eu/vuln/cve-2026-115725