CVE ID :CVE-2026-121620 Published : Nov. 4, 2026, 12:38 p.m. | 26 minutes ago Description :CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge Zelty webhook events because the x-zelty-hmac-sha256 HMAC...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121620 - CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification

VERWANDTEARTIKEL

Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems

Apache OpenOffice: Mehrere Schwachstellen

CVE-2026-121147 - Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application

CVE-2026-121940 - Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers

CVE-2026-121941 - libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex

CVE-2026-121939 - Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking