TI-2026-75456 CVE-2026-111670 · GHSA-92qp-c535-v34gMissing authorization in ClickVisual report APIPriority MEDIUM 57ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted.CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2026-10-16 · No fix listed CWE-862