thechangelog

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

thechangelog records in CISA KEV

No thechangelog vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83257 CVE-2026-119763 · GHSA-m43r-rq77-95gx

Missing authorization in changelog.com exposes unpublished content

HIGH 70

changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItem…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00486 Published 2026-10-30 Fixed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0