https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:20:44 +0000 https://db.gcve.eu/vuln/cve-2026-97898 <p><strong>Affected:</strong> akia</p> <p>Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest&#39;s booking. An authenticated guest could unlock rooms other than their own, resulting in unauthorized physical access to guest rooms at an affected property.</p> <p>As of 19th September 2026 the service is no more vulnerable to this attack (feedback received by the reporter).</p> <p>The attack is remote but the effect is local to an affected property.</p> <p><strong>Affected:</strong> akia</p> <p>Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest&#39;s booking. An authenticated guest could unlock rooms other than their own, resulting in unauthorized physical access to guest rooms at an affected property.</p> <p>As of 19th September 2026 the service is no more vulnerable to this attack (feedback received by the reporter).</p> <p>The attack is remote but the effect is local to an affected property.</p> https://db.gcve.eu/vuln/cve-2026-97898