Description
Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant's webhook via a crafted request.
High · 8.1
CVE-2026-50875
EUVD-2026-36773GHSA-42j4-px2f-mhr5
Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily mod…
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by mitre