Description
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rhymix | Rhymix | < 2.1.31 | 2.1.31 |
High · 7.4
CVE-2026-36453
EUVD-2026-77109GHSA-96w3-w353-39h8
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.
Published Sep 13, 2026 · Updated Sep 14, 2026 · Assigned by mitre