CVE-2026-111350
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to
CVSS
5.0
Média
EPSS
0.3%
p17
KEV
—
Exploit Today
5
0-100
Publicado: 15 de out. de 2026 · Última mod.: 16 de out. de 2026 · CWE-862
0.3%EPSS · 30 dias0.3%
2026-10-162026-11-06
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.
- github.comhttps://github.com/papermark/papermark
- github.comhttps://github.com/papermark/papermark/blob/v0.22.0/pages/api/teams/%5BteamId%5D/datarooms/%5Bid%5D/groups/%5BgroupId%5D/index.ts#L155-L190
- github.comhttps://github.com/papermark/papermark/blob/v0.22.0/pages/api/teams/%5BteamId%5D/datarooms/%5Bid%5D/groups/%5BgroupId%5D/links.ts#L52-L56
- github.comhttps://github.com/papermark/papermark/commit/7fa52b23944823a9e74402fca8e48d644239bc0b
- github.comhttps://github.com/papermark/papermark/commit/b81cf62f390cda112f35538eb09e54b5f728b74a
- hackmd.iohttps://hackmd.io/@hieuPenguinnn/papermark-dataroom-group-delete-missing-authz
- www.vulncheck.comhttps://www.vulncheck.com/advisories/papermark-through-0.22.0-missing-authorization-in-data-room-viewer-group-api
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-191316.5 MÉD—
———IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due to missing authorization.6hCVE-2026-173197.1 ALT—
———IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify tool configuration and cause a denial of service due to improper authorization. Information supplied by the client is relied on when deciding what a user is allowed to do, which could allow unauthorized changes that disrupt service.6hCVE-2026-172447.4 ALT—
———IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform unauthorized actions and obtain sensitive information due to missing authorization. Certain operations do not verify that the user is permitted to act on the targeted resource, which could allow other users' API keys to be deleted.6hCVE-2026-170669.1 CRÍ—
———IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and modify or delete data belonging to other tenants due to missing authorization.6hCVE-2026-1107055.3 MÉD—
———The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to export the entire Redux options panel configuration — including API keys, SMTP credentials, licence keys, and third-party tokens — that is otherwise restricted to administrators. Exploitation requires that a theme or plugin registers a Redux import_export field on a user profile via Redux_Users::set_profile(), which causes the nonce to be printed into the subscriber's own /wp-admin/profile.php page source, making it directly readable without any additional privileges.6hCVE-2026-173629.8 CRÍ—
———IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to create, modify, or delete tenants due to missing authorization.6h