https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:05:20 +0000 https://db.gcve.eu/vuln/cve-2026-111680 <p><strong>Affected:</strong> APIParkLab APIPark</p> <p>APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams&#39; services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services and /api/v1/simple/apps to read, modify, or delete other teams&#39; services and applications via /api/v1/service/info and /api/v1/app endpoints.</p> <p><strong>Affected:</strong> APIParkLab APIPark</p> <p>APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams&#39; services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services and /api/v1/simple/apps to read, modify, or delete other teams&#39; services and applications via /api/v1/service/info and /api/v1/app endpoints.</p> https://db.gcve.eu/vuln/cve-2026-111680