https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 25 Sep 2026 05:53:01 +0000 https://vulnerability.circl.lu/sighting/b9db3357-79a5-44c9-a088-d4b762736ccf/export {"uuid": "b9db3357-79a5-44c9-a088-d4b762736ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-w89x-c962-c44g", "type": "seen", "source": "https://gist.github.com/alon710/ef2507a456faec84524daa5ace994dc8", "content": "# CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools\n\n> **CVSS Score:** 3.8\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77637\n\n## Summary\nCVE-2026-77637 is a privilege scope bypass vulnerability in Cloudreve. It allows authenticated clients possessing read-only administrative credentials to access sensitive administrative tool endpoints that should require write-level permissions.\n\n## TL;DR\nMissing authorization checks in Cloudreve allow read-only administrators to trigger SMTP test emails and retrieve WOPI discovery settings.\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 3.8 (Low)\n- **Exploit Status**: None (No public exploit available)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Low (Bypasses administrative write protections)\n\n## Affected Systems\n\n- Cloudreve\n- **Cloudreve**: < 4.18.0 (Fixed in: `4.18.0`)\n\n## Mitigation\n\n- Upgrade Cloudreve to version 4.18.0 or later.\n- Audit administrative API keys and enforce the principle of least privilege.\n- Restrict outbound SMTP server connections using firewall egress filters.\n\n**Remediation Steps:**\n1. Download the latest Cloudreve release (4.18.0 or later).\n2. Replace the existing binary with the updated version.\n3. Restart the Cloudreve system service.\n4. Verify the scope permissions of all active OAuth tokens.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w89x-c962-c44g)\n- [Fix Commit](https://github.com/cloudreve/cloudreve/commit/bce08f88e9d8f881e78fd18e7a6598b31922c492)\n- [Cloudreve Release v4.18.0](https://github.com/cloudreve/cloudreve/releases/tag/4.18.0)\n- [NVD CVE-2026-77637 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-77637)\n- [CVE.org CVE-2026-77637 Record](https://www.cve.org/CVERecord?id=CVE-2026-77637)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77637) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T04:31:50.873773Z"} {"uuid": "b9db3357-79a5-44c9-a088-d4b762736ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-w89x-c962-c44g", "type": "seen", "source": "https://gist.github.com/alon710/ef2507a456faec84524daa5ace994dc8", "content": "# CVE-2026-77637: CVE-2026-77637: Privilege Scope Bypass in Cloudreve Administrative Tools\n\n> **CVSS Score:** 3.8\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77637\n\n## Summary\nCVE-2026-77637 is a privilege scope bypass vulnerability in Cloudreve. It allows authenticated clients possessing read-only administrative credentials to access sensitive administrative tool endpoints that should require write-level permissions.\n\n## TL;DR\nMissing authorization checks in Cloudreve allow read-only administrators to trigger SMTP test emails and retrieve WOPI discovery settings.\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 3.8 (Low)\n- **Exploit Status**: None (No public exploit available)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Low (Bypasses administrative write protections)\n\n## Affected Systems\n\n- Cloudreve\n- **Cloudreve**: < 4.18.0 (Fixed in: `4.18.0`)\n\n## Mitigation\n\n- Upgrade Cloudreve to version 4.18.0 or later.\n- Audit administrative API keys and enforce the principle of least privilege.\n- Restrict outbound SMTP server connections using firewall egress filters.\n\n**Remediation Steps:**\n1. Download the latest Cloudreve release (4.18.0 or later).\n2. Replace the existing binary with the updated version.\n3. Restart the Cloudreve system service.\n4. Verify the scope permissions of all active OAuth tokens.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w89x-c962-c44g)\n- [Fix Commit](https://github.com/cloudreve/cloudreve/commit/bce08f88e9d8f881e78fd18e7a6598b31922c492)\n- [Cloudreve Release v4.18.0](https://github.com/cloudreve/cloudreve/releases/tag/4.18.0)\n- [NVD CVE-2026-77637 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-77637)\n- [CVE.org CVE-2026-77637 Record](https://www.cve.org/CVERecord?id=CVE-2026-77637)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77637) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T04:31:50.873773Z"} https://vulnerability.circl.lu/sighting/b9db3357-79a5-44c9-a088-d4b762736ccf/export Wed, 23 Sep 2026 04:31:50 +0000