Skip to content
OpenAdvisories

Vendor

colinin

2 known vulnerabilities.

Products

abp-next-admin 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119708

    abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name

    abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name endpoint, letting authenticated users read other tenants' files. Attackers supply a victim tenantId in the request path, causing DownloadB…

    colinin abp-next-admin
  • Medium 5.4
    CVE-2026-111630

    abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagement Chat Conversations

    abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers ho…

    colinin abp-next-admin