Casdoor

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 3, 2026
Last mentionedSep 3, 2026

Timeline

1 articles · newest first

VU#889462: Casdoor authentication server is vulnerable to authorization bypass

Casdoor IAM versions 3.115.0 and earlier allow organization admins to bypass tenant isolation through inconsistent authorization checks, tracked as CVE-2026-15630.

CERT/CC Vulnerability NotesSep 3, 17:03 UTC · Sep 3, 2026VulnerabilityCVE-2026-156301 · 1 read

Related CVEs

by mentions

CVE-2026-15630<1%9.9
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch…
published Jul 23, 2026

Appears with

Casdoorvendor · 1
CERT/CCvendor · 1
Voke Cyberorganization · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned Sep 3, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.