Live › vulnerability › CVE-2026-105272
Go to dashboardGROWI, a wiki application, has an authorization bypass in its page viewing and commenting code caused by trusting a user-controlled key. An authenticated attacker can read page contents and comments they do not have permission to view.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 03:31 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploiting this vulnerability, an authenticated attacker may obtain the contents and comments of pages without the required read permission.
This page as .md · .json · in your agent: get_signal("CVE-2026-105272")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.