TI-2026-75440 CVE-2026-111654 · GHSA-gm3x-2x46-fc3v
Insecure direct object reference in FastBee group endpoints
Priority MEDIUM 57
FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks.