https://vulnerability.circl.lu/sightings/feed 2026-10-20T08:32:43.435250+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2dbf3ea4-82ef-49a3-aa5e-6dde4b5b63e2/export 2026-10-20T08:32:43.464709+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2dbf3ea4-82ef-49a3-aa5e-6dde4b5b63e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-110109", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117434717473283647", "content": "CVE-2026-110109 JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/{productId}. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec providers and configurations, controlling how transparent messages are decoded and encoded for every device of that product.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110109https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/jetlinks-community-transparent-codec-save-authz-bypasshttps://github.com/jetlinks/jetlinks-community/blob/60ecc9f65d96acfd38da8daecdb0062fc72034f3/jetlinks-manager/device-manager/src/main/java/org/jetlinks/community/device/web/TransparentMessageCodecController.java#L138-L143https://github.com/hs-web/hsweb-framework/blob/5.0.1/hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Authentication.java#L206-L218https://github.com/jetlinks/jetlinks-communityhttps://www.vulncheck.com/advisories/jetlinks-community-through-2.10.0-missing-authorization-via-product-level-transparent-codec-save#jetlinks #JetLinksCommunity#CVE_2026_110109#bot", "creation_timestamp": "2026-10-13T17:13:03.117076Z"} 2026-10-13T17:13:03.117076+00:00