Vulnerabilities

Report: CVE-2026-35479 - InvenTree Plugin Installation - Insufficient Permissions

2026-04-08 0 views admin
Report: CVE-2026-35479 - InvenTree Plugin Installation - Insufficient Permissions

CVE ID :CVE-2026-35479 Published : April 8, 2026, 8:16 p.m. | 18 minutes ago Description :InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, any users who have staff access permissions can install plugins via the API, without requiring

CVE Details

Published
April 8, 2026

🏷️ Tags

report35479inventreeplugininstallationinsufficientpermissionspublishedcverce

More from Vulnerabilities

Report: CVE-2026-40105 - XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare funct

Report: CVE-2026-40105 - XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare funct

2026-04-15 0
Report: CVE-2026-33806 - fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content

Report: CVE-2026-33806 - fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content

2026-04-15 0
Report: CVE-2025-54550 - Apache Airflow: RCE by race condition in example_xcom dag - Guide

Report: CVE-2025-54550 - Apache Airflow: RCE by race condition in example_xcom dag - Guide

2026-04-15 0
Report: Complete Guide to CVE-2026-1541 - Avada (Fusion) Builder <= 3.15.1 - authenticated (subscriber+) sensitive informat...

Report: Complete Guide to CVE-2026-1541 - Avada (Fusion) Builder <= 3.15.1 - authenticated (subscriber+) sensitive informat...

2026-04-15 0

Trending

1

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

2025-10-27 • 189 views
2

CVE-2025-43939: Dell Unity OS Command Injection (High)

2025-10-30 • 148 views
3

Google disputes false claims of massive Gmail data breach

2025-10-30 • 130 views
4

Microsoft: DNS outage impacts Azure and Microsoft 365 services

2025-10-30 • 88 views
5

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting

2025-11-25 • 81 views