Threats Tagged 'cve-2026-75517'
View all threats tagged with 'cve-2026-75517'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-75517'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-75517 is an authorization bypass vulnerability in Novu versions prior to 3.18.0. The issue arises because certain integration mutation API calls do not consistently enforce environment boundaries when identifying integrations by integrationId and organizationId. This allows a user with access to one environment to manipulate integrations in another environment within the same organization, including deleting integrations, modifying credentials, changing the primary provider, or triggering auto-configuration. Version 3.18.0 partially addresses the issue by enforcing environment boundaries for environment-scoped API key authentication, but dashboard session behavior still allows cross-environment access and requires further resolution. Join the discussion | CVE Database V5 | 09/22/2026, 15:51:24 UTC Added: 09/22/2026, 16:03:17 UTC |
Showing 1 to 1 of 1 result