Vulnerabilities

TI-2026-83427 CVE-2026-62277

Authorization bypass in LubeLogger exposes other users' vehicle data

MEDIUM 62

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00316 Published 2026-10-30 Fixed in 1.6.8 CWE-639

TI-2026-44472 CVE-2026-62278

LOW 38

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00508 Published 2026-09-18 Fixed in 1.6.8 CWE-22

TI-2026-44473 CVE-2026-62279

LOW 31

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00401 Published 2026-09-18 Fixed in 1.6.8 CWE-639