Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-111667rebuild · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111667 REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list endpoint to retrieve its comment content and attachment references. EPSS 0.3%Vulnerability getrebuild #ghsa-5cv6-8j9w-94rq	CVE Database V5	2026-10-16
Medium	6.0	EPSS 0.3%	CVE-2026-110611rebuild · Authorization Bypass Through User-Controlled Key Medium6.0EPSS 0.3%2026-10-14CVE Database V5CVE-2026-110611 CVE-2026-110611 is an authorization bypass vulnerability in the getrebuild product 'rebuild' through version 4.5.0. It affects the AiBot2Controller /aibot2 endpoints, which improperly trust a caller-supplied chatid without verifying ownership. Authenticated users with low privileges can exploit this flaw to read, delete, exfiltrate, or interrupt AI assistant conversations belonging to other users. EPSS 0.3%Vulnerability getrebuild	CVE Database V5	2026-10-14

Showing 1–2 of 2 results