Skip to content
OpenAdvisories

Vendor

PoxenStudio

3 known vulnerabilities.

Products

talebook 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-45273

    MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint

    MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py applies the auth decorator but does not check the self.admin_user property, unl…

    PoxenStudio talebook