Threats Tagged 'cve-2026-61589'
View all threats tagged with 'cve-2026-61589'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-61589'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in djust versions prior to 1.0.7 causes tenant misresolution due to improper reconstruction of HttpRequest objects during WebSocket handling. This leads to cross-tenant data disclosure when STRICT_MODE is set to False, or broken tenancy with empty querysets by default. The issue arises because the Host header is missing in the reconstructed request, defaulting to "testserver" and causing tenant resolvers to fail. The vulnerability is fixed in version 1.0.7 by properly extracting and validating the Host from the ASGI scope against ALLOWED_HOSTS. Join the discussion | CVE Database V5 | 09/16/2026, 22:08:52 UTC Added: 09/16/2026, 22:32:16 UTC |
Showing 1 to 1 of 1 result