LOWVulnerability

CVE-2026-77145

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers.

Properties

last_source
NVD
cve_id
CVE-2026-77145
signal_observed_at
2026-09-29T00:56:27+00:00
retrieved_at
2026-09-29T00:56:27+00:00
published_at
2026-08-25T09:17:35.667
last_modified
2026-09-28T23:10:00.143

Related Entities (2)

HAS_WEAKNESS (1)

→[Weakness]Authorization Bypass Through User-Controlled Key

DESCRIBED_BY (1)

→[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-77145 — Ninja Signal Threat Intelligence | Ninja Signal