stumpapp

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

stumpapp records in CISA KEV

No stumpapp vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-69553 CVE-2026-107450

Incorrect authorization in Stump smart list mutations

MEDIUM 58

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission and resolve the target list at Reader a…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00211 Published 2026-10-08 No fix listed CWE-863

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0