Approved changes feed: RSS · Atom
cpe:2.3:a:sharkord:sharkord:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sharkord (0f36405c-81ca-5051-8900-4d20eb0f241d) |
|---|---|
| Product | Sharkord (f050807c-2b23-5b48-856f-9516b4b6facf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113595 |
vulnerable | 2026-11-03 10:16:27.420018 |
Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route
MEDIUM (4.3)
Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE_SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.
Published: 2026-10-20T15:40:24.447Z
Updated: 2026-10-23T13:55:55.388Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-113594 |
vulnerable | 2026-11-03 10:16:27.061560 |
Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
MEDIUM (5.4)
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGE_SETTINGS permission. Attackers can set a join password, disable registration, zero upload limits, or toggle plugin loading to deny service to other members.
Published: 2026-10-20T15:40:23.782Z
Updated: 2026-10-20T16:17:58.243Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.