{"metadata": {"vulnerability": "CVE-2026-111364", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111364", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T21:21:05.161Z", "date_only": false, "value": "2026-10-15T21:21:05.161Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111364", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:48.449Z", "date_only": false, "value": "2026-10-15T21:43:48.449Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111364", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:48.449Z", "date_only": false, "value": "2026-10-15T21:43:48.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111364", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T21:43:48.449Z", "date_only": false, "value": "2026-10-15T21:43:48.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111364", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:17:41.764Z", "date_only": false, "value": "2026-10-15T22:17:41.764997Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447239988189770", "record": "CVE-2026-111364", "field": "creation_timestamp", "uuid": "0301e1ef-6967-47bc-9d31-430ea28f8575", "content": "CVE-2026-111364 MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to read markdown and HTML from private books.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111364https://hackmd.io/@hieuPenguinnn/mindoc-api-content-get-cross-book-document-idorhttps://github.com/mindoc-org/mindoc/blob/v2.2-beta.2/controllers/DocumentController.go#L847-L973https://github.com/mindoc-org/mindoc/blob/v2.2-beta.2/routers/router.go#L242https://github.com/mindoc-org/mindochttps://www.vulncheck.com/advisories/mindoc-through-2.2-beta.2-idor-via-api-key-content-id-get-branch#mindoc-org #MinDoc#CVE_2026_111364#bot", "url": "https://infosec.exchange/users/cve/statuses/117447239988189770"}, {"timestamp": "2026-10-15T22:19:34Z", "date_only": false, "value": "2026-10-15T22:19:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C99C-GH3J-2MP4", "record": "GHSA-C99C-GH3J-2MP4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:34.260Z", "date_only": false, "value": "2026-10-15T22:19:34.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111364", "record": "FKIE_CVE-2026-111364", "field": "published"}, {"timestamp": "2026-10-15T22:19:34.260Z", "date_only": false, "value": "2026-10-15T22:19:34.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111364", "record": "FKIE_CVE-2026-111364", "field": "lastModified"}, {"timestamp": "2026-10-16T00:31:58Z", "date_only": false, "value": "2026-10-16T00:31:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C99C-GH3J-2MP4", "record": "GHSA-C99C-GH3J-2MP4", "field": "published"}, {"timestamp": "2026-10-16T00:31:59Z", "date_only": false, "value": "2026-10-16T00:31:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C99C-GH3J-2MP4", "record": "GHSA-C99C-GH3J-2MP4", "field": "modified"}]}