CVE ID :CVE-2026-111722
Published : Oct. 16, 2026, 6:17 p.m. | 42 minutes ago
Description :LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users’ projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite, reassign or delete any user’s short-drama projects.
Severity: 8.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More