Voke Cyber

Mentions · 7d0
Mentions · 30d2
All mentions3
First seenSep 3, 2026
Last mentioned16d ago

Timeline

3 articles · newest first

VU#166125: Bisheng has authentication bypass vulnerabilities

CERT/CC warns Bisheng has an unpatched SSO authentication bypass that can grant super-admin access.

CERT/CC Vulnerability NotesOct 14, 12:39 UTC · 16d agoVulnerabilityCVE-2026-96679 CVE-2026-96681 CVE-2026-1001565 · 1 read

VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration

CERT/CC says Lowcoder 2.4.10 lets admins or developers read and run other tenants' library queries.

CERT/CC Vulnerability NotesOct 13, 19:21 UTC · 17d agoVulnerabilityCVE-2026-167532 · 1 read

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

Casdoor IAM versions 3.115.0 and earlier allow organization admins to bypass tenant isolation through inconsistent authorization checks, tracked as CVE-2026-15630.

CERT/CC Vulnerability NotesSep 3, 17:03 UTC · Sep 3, 2026VulnerabilityCVE-2026-156301 · 1 read

Related CVEs

by mentions

CVE-2026-15630<1%9.9
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch…
published Jul 23, 2026
CVE-2026-167538.8
Cross-tenant auth bypass in Lowcoder library queries
published 17d agoLowcoder
CVE-2026-100156—
published —
CVE-2026-96681—
published —
CVE-2026-96679—
published —

Appears with

CERT/CCorganization · 2
Lowcodervendor · 1
DataElementvendor · 1
CERT/CCvendor · 1
Casdoorproduct · 1
DataElementorganization · 1
Casdoorvendor · 1
Bishengproduct · 1
Lowcoderproduct · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned 16d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.