Aggregator

CVE-2026-4990 | chatwoot up to 4.11.1 Signup Endpoint /app/login signupEnabled improper authorization

VulDB Recent Entries
1 week 3 days ago
A vulnerability described as critical has been identified in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of the component Signup Endpoint. Such manipulation of the argument signupEnabled with the input true leads to improper authorization. This vulnerability is documented as CVE-2026-4990. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-4982 | pretix Venueless prior 2026.3.27.e20083a Chat Message permission (GHSA-6fq7-pgj3-6cfp / EUVD-2026-16593)

VulDB Recent Entries
1 week 3 days ago
A vulnerability marked as critical has been reported in pretix Venueless. Impacted is an unknown function of the component Chat Message Handler. This manipulation causes permission issues. This vulnerability is registered as CVE-2026-4982. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.
vuldb.com

Managed ad