Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: linqi — linqi.help/en/reference/security/security-advisories Clear all filters
TI-2026-09814 CVE-2026-11369 · GHSA-8rq4-278f-v3vj

IDOR in Comment API Allows Cross-Process Comment Read and Write

Priority LOW 31

The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00207 Published 2026-06-05 No fix listed CWE-639
TI-2026-09793 CVE-2026-11345 · GHSA-xj32-w24w-7c6q

Improper Authentication Bypass in linqi CDN File Access

Priority LOW 37

An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-06-05 Fixed in 1.4.8.6 CWE-287