Skip to content
OpenAdvisories

Product · Mettle

sendportal-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111358

    SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form

    SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other workspaces' tags by supplying unvalidated tag IDs. Attackers can submit sequential tag IDs via t…

    Mettle sendportal-core