Medium CVE-2026-49192 The summary service endpoint suffers from an IDOR vulnerability where it fails to verify user ownership of hardware serial numbers, exposing device data to scraping. CVSS: 5.3 · CWE: CWE-639 View on NVD