Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 10m ago

#idor — news, CVEs and analysis · ZeroHour

today 47 visits · 60 views · 7 reads·all time 17K views

Tag

#idor

3 stories this week · 5 this month · 10 in 6 months · mostly security

stories per day · 30 days

Related#authorization 2 #bola 2 #access-control 1 #apache 1 #apache-roller 1 #api-security 1 #authorization-bypass 1 #cinnamon 1 #conde-nast 1 #cve-2026-82348 1 #cve-2026-86867 1 #data-breach 1 #data-sale 1 #graphql 1 #java 1 #kotaemon 1 #multi-user 1 #mybatis 1

10 stories, newest first · one card per story

oss-security·1d ago

CVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

#apache #apache-roller #cve-2026-82348

CVE-2026-82348

CERT/CC Vulnerability Notes·3d ago high

VU#754548: Cinnamon's kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers

#kotaemon #cinnamon #idor

CVE-2026-86867

3 min

Help Net Security·5d ago

Siemba brings continuous IDOR testing to production APIs

#api-security #bola #graphql

Tools

4 min

arXiv cs.CR·16d ago

IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications

#access-control #authorization #bola

Research

1

Security Affairs·19d ago high

Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

#conde-nast #data-breach #data-sale

in the wild 6 min

The Hacker News·Aug 26, 2026

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

#agentic-ai #aikido-security #ai-safety

in the wild 4 min

Palo Alto Unit 42·Aug 17, 2026

AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments

#api-security #bola #easyappointments

10 min

Palo Alto Unit 42·Aug 17, 2026

Identifying a BOLA Vulnerability in Harbor, a Cloud

#bola #cncf #container-registry

8 min1

Palo Alto Unit 42·Aug 17, 2026

Harnessing LLMs for Automating BOLA Detection

#api-security #automated-testing #bola

12 min

Exploit-DB·Aug 17, 2026

[webapps] Probo 0.222.2 - IDOR

#access-control #idor #poc

Exploit / PoC