Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.3%	CVE-2026-108729corteza · Incorrect Authorization High8.2EPSS 0.3%2026-10-11CVE Database V5CVE-2026-108729 Corteza versions up to 2024.9.10 have an incorrect authorization vulnerability in the compose attachment endpoints. This flaw allows unauthenticated attackers to download private attachments by manipulating the URL kind segment to page, icon, or namespace. Attackers with knowledge of a private record or module attachment ID can access original or preview files without requiring a token or signature, bypassing namespace and record permission boundaries. The vulnerability has a high severity with a CVSS score of 8.2. EPSS 0.3%Vulnerability cortezaproject #ghsa-8hq6-x78m-7h79	CVE Database V5	2026-10-11
Medium	6.0	EPSS 0.3%	CVE-2026-6093corteza · SQL Injection Medium6.0EPSS 0.3%2026-05-11CVE Database V5CVE-2026-6093 Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8. EPSS 0.3%Vulnerability cortezaproject #cwe-89 #ghsa-fcwm-j73v-xh2m	CVE Database V5	2026-05-11

Showing 1–2 of 2 results