Threats Tagged 'ghsa-gfff-pw4q-26jh'
View all threats tagged with 'ghsa-gfff-pw4q-26jh'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-gfff-pw4q-26jh'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-111608 is an authorization bypass vulnerability in Jeepay versions up to 3.2.9. It allows authenticated merchant users with specific permissions to delete other merchants' division receivers by exploiting an ownership check on an incorrect database column. The vulnerability requires the attacker to have the ENT_DIVISION_RECEIVER_DELETE permission and to own a receiver group with an ID matching the victim's receiver ID. The CVSS score is low, indicating limited impact and complexity. Join the discussion | CVE Database V5 | 10/16/2026, 18:34:42 UTC Added: 10/16/2026, 17:51:05 UTC |
Showing 1 to 1 of 1 result