Skip to content
OpenAdvisories

Vendor

RARgames

6 known vulnerabilities.

Products

4gaBoards 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-53959 Public exploit

    4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users to any authenticated user

    4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user through GET /api/users and retrieve arbitrary accounts through GET /api/users/:id. The users/…

    RARgames 4gaBoards
  • Medium 5.3
    CVE-2026-41418

    4ga Boards: User Enumeration via Timing Side-Channel in Authentication Endpoint

    4ga Boards is a boards system for realtime project management. Prior to 3.3.5, 4ga Boards is vulnerable to user enumeration via a timing side-channel in the login endpoint (POST /api/access-tokens). When an invalid username/email is provided, the server respo…

    RARgames 4gaBoards