Skip to content
OpenAdvisories

Vendor

samuelclay

2 known vulnerabilities.

Products

NewsBlur 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-56772

    NewsBlur < 14.5.0 - Insecure Direct Object Reference in Social Interactions Endpoint

    NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private notification feeds by supplying arbitrary user_id values to the GET /social/interactions endpoint without ownership verification. Attackers c…

    samuelclay NewsBlur