UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-106677

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as read for arbitrary conversation ids because the service does not verify that the caller is a conversation participant.

Properties

Last source
NVD
Nvd fetched at
2026-10-26T19:15:24.996242+00:00
Cve id
CVE-2026-106677
First seen by Signal
2026-10-26T19:10:44+00:00
Retrieved at
2026-10-26T19:17:44+00:00
Published at
2026-10-26T17:17:11.957
Last modified
2026-10-26T18:41:21.450

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-106677 — Ninja Signal Threat Intelligence | Ninja Signal