Skip to content
OpenAdvisories

Product · esaqa

Psono

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-128970 Public exploit

    Missing membership acceptance check permits group share-right deletion by invitees in Psono Server

    Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not require accepted group membership when authorizing deletion of group share-rights. The DELETE /share/right/ endpoint checks for a membership m…

    esaqa Psono