Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-111680APIPark · Authorization Bypass Through User-Controlled Key High7.2EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111680 APIPark versions up to and including 1.9.7-beta have an authorization bypass vulnerability that allows authenticated team managers to access and manipulate other teams' services and applications by modifying the team ID parameter. This can lead to unauthorized reading, modification, or deletion of services and applications across teams. EPSS 0.3%Vulnerability APIParkLab #ghsa-xgfj-4539-7qh6	CVE Database V5	2026-10-16
Medium	6.0	EPSS 0.2%	CVE-2026-108862APIPark · Authorization Bypass Through User-Controlled Key Medium6.0EPSS 0.2%2026-10-11CVE Database V5CVE-2026-108862 APIPark versions up to 1.9.7-beta have an insecure direct object reference vulnerability allowing authenticated users with authorization-view permission to access other applications' API keys by supplying a foreign authorization UUID. This bypasses the HideCredential setting and exposes plaintext API keys via the /api/v1/app/authorization endpoint. EPSS 0.2%Vulnerability APIParkLab #ghsa-5xgx-36cx-7963	CVE Database V5	2026-10-11

Showing 1–2 of 2 results