Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 163 bronnen 2 kritiek 18 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-82014

MEDIUM · 4.3 CVSS Gepubliceerd: CWE-915

Beschrijving

Any authenticated user, including a Viewer, could change the preferences of any team, such as its home dashboard, theme and timezone, through an undocumented endpoint with no access control, and so redirect every member of that team to a dashboard of their choice (missing authorization).

References