TI-2026-63405 CVE-2026-94382 · GHSA-x7pw-mf2h-rgr4
Beszel before 0.19.0 Insecure Direct Object Reference via user-alerts
Priority MEDIUM 45
Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot…