Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.3%	CVE-2026-108718rill · Missing Authorization High8.6EPSS 0.3%2026-10-11CVE Database V5CVE-2026-108718 Rill Data rill versions 0.77.0 through 0.90.5 have a missing authorization vulnerability in the admin OAuth server. This flaw allows attackers to register clients with the long_lived_access_token scope without user consent. By tricking a user into authorizing such a client, attackers can obtain a non-expiring API token with the user's full permissions. EPSS 0.3%Vulnerability Rill Data #ghsa-r44j-vvw7-323g	CVE Database V5	2026-10-11

Showing 1–1 of 1 result