https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:47:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-73039 <p><strong>Affected:</strong> streamaserver streama</p> <p>streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users&#39; viewing status records. Attackers can enumerate all users&#39; watch progress, delete arbitrary viewing history, and manipulate other users&#39; Continue Watching dashboards by supplying arbitrary primary keys without ownership verification.</p> <p><strong>Affected:</strong> streamaserver streama</p> <p>streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users&#39; viewing status records. Attackers can enumerate all users&#39; watch progress, delete arbitrary viewing history, and manipulate other users&#39; Continue Watching dashboards by supplying arbitrary primary keys without ownership verification.</p> https://vulnerability.circl.lu/vuln/cve-2026-73039