Skip to content
OpenAdvisories

Product · CERT.PL

MWDB Core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-66724

    Permission Bypass Via Undocumented HTTP Methods In MWDB Core

    MWDB Core versions >=2.0.0 and <2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT me…

    CERT.PL MWDB Core