Threats tagged 'ghsa-r9xw-h7vq-jh5r'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-123197WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated Medium6.92026-11-05GCVE DatabaseCVE-2026-123197 WPPConnect Server versions up to 2.10.76 have a missing authentication vulnerability that allows unauthenticated attackers to access decrypted sticker media via the /files static mount. Attackers can enumerate Unix timestamps in GET requests to retrieve stickers from any session, bypassing session token checks. Report on CVE-2026-123197 Vulnerability CWE-552 #ghsa-r9xw-h7vq-jh5r	GCVE Database	2026-11-05

Page 1 of 1