blackcandy-org

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

blackcandy-org records in CISA KEV

No blackcandy-org vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-63936 CVE-2026-97061 · GHSA-8g7p-g3x7-hm9p

Black Candy through 3.2.1 Information Disclosure via Playlist Search

LOW 23

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all playlists on the instance.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00218 Published 2026-09-24 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0