CVE-2026-61726 — Private Recipe Bypass via Step API
An analysis of CVE-2026-61726 — a private recipe authorization bypass in Tandoor Recipes where the Step API exposes read and write access to protected recipe content.
CVERead →$ tail -f writeups.log
Write-Ups
CVE-2026-61663 — Missing Authorization in render_object_structure
An analysis of CVE-2026-61663 — a missing authorization issue in django-cms exposing non-PageContent placeholder structure to low-privileged staff users.
CVERead →