Skip to content
OpenAdvisories

Vendor

wannabespace

2 known vulnerabilities.

Products

tamery 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119664

    Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update

    Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable. Authenticated Pro subscribers who know another user's chat ID can…

    wannabespace tamery
  • Medium 4.3
    CVE-2026-119663

    Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create

    Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connecti…

    wannabespace tamery