CVE ID :CVE-2026-111312 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111312 - OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route

VERWANDTEARTIKEL

CVE-2026-75941 - Lenovo Legion Zone Remote Code Execution Vulnerability

CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console