{"uuid": "59382fd7-b5bd-4e23-9ff5-88cdbff1a415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94535", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117393694545959067", "content": "CVE-2026-94535 lamp-cloud up to 5.10.0: auth bypass in deleteMyNotice endpoint lets any authenticated user delete other users' notifications. CVSS 7.1, no patch yet. Restrict endpoint access now. https://www.valtersit.com/cve/CVE-2026-94535/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-06T11:20:23.350823Z"}