CVE ID :CVE-2026-63396 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOrgs` through `/api/v1/graphql` on a publicly accessible deployment and obtain...

#Sicherheitslücke #Databreach

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63396 - Coop has a data leak via unauthenticated GraphQL Query.allOrgs

VERWANDTEARTIKEL

CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names

CVE-2026-63377 - TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

CVE-2026-63378 - TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

CVE-2026-63393 - OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

CVE-2026-63338 - IXP Manager has Broken Object-Level Authorization

CVE-2026-63339 - IXP Manager has authenticated non-administrator privilege escalation