Skip to content
OpenAdvisories

Vendor

sergix44

1 known vulnerabilities.

Products

XBackBone 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-110230

    XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint

    XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity route. Attackers can supply sequential upload ids to MediaController::createVanit…

    sergix44 XBackBone