CVE-2026-121560

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121560", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-03T14:46:17.953Z", "datePublished": "2026-11-03T15:17:16.390Z", "dateUpdated": "2026-11-03T16:42:29.845Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-03T15:17:16.390Z"}, "datePublic": "2026-11-02T00:00:00.000Z", "title": "LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts", "descriptions": [{"lang": "en", "value": "LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post authors to modify any other post by supplying mismatched postId and id body parameters. Attackers can set postId to their own post and id to an enumerated victim post UUID to overwrite its title, slug, content, boardId and roadmap_id."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Authorization Bypass Through User-Controlled Key", "cweId": "CWE-639", "type": "CWE"}]}], "affected": [{"vendor": "logchimp", "product": "logchimp", "defaultStatus": "unaffected", "packageURL": "pkg:github/logchimp/logchimp", "versions": [{"version": "0.9.0-alpha.1", "lessThan": "0.9.3", "versionType": "semver", "status": "affected"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 7.1, "baseSeverity": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/logchimp/logchimp/commit/a78b69af342908472ad400285187e43729295a7c", "tags": ["patch"], "name": "Patch Commit"}, {"url": "https://github.com/logchimp/logchimp", "tags": ["product"]}, {"url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/controllers/post/updatePost.ts#L67", "tags": ["technical-description"]}, {"url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/middlewares/postExists.ts#L72-L77", "tags": ["technical-description"]}, {"url": "https://github.com/logchimp/logchimp/releases/tag/v0.9.3", "tags": ["technical-description", "release-notes"], "name": "logchimp v0.9.3 Release Notes"}, {"name": "VulnCheck Advisory: LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/logchimp-before-0.9.3-authorization-bypass-via-patch-api-v1-posts"}], "credits": [{"lang": "en", "value": "leediay153 from Viettel Post", "type": "finder"}, {"lang": "en", "value": "mittalyashu", "type": "remediation developer"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-03T16:42:12.790602Z", "id": "CVE-2026-121560", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T16:42:29.845Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-121560", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-03T16:42:12.790602Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T16:42:25.504Z"}}], "cna": {"title": "LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts", "credits": [{"lang": "en", "type": "finder", "value": "leediay153 from Viettel Post"}, {"lang": "en", "type": "remediation developer", "value": "mittalyashu"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "logchimp", "product": "logchimp", "versions": [{"status": "affected", "version": "0.9.0-alpha.1", "lessThan": "0.9.3", "versionType": "semver"}], "packageURL": "pkg:github/logchimp/logchimp", "defaultStatus": "unaffected"}], "datePublic": "2026-11-02T00:00:00.000Z", "references": [{"url": "https://github.com/logchimp/logchimp/commit/a78b69af342908472ad400285187e43729295a7c", "name": "Patch Commit", "tags": ["patch"]}, {"url": "https://github.com/logchimp/logchimp", "tags": ["product"]}, {"url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/controllers/post/updatePost.ts#L67", "tags": ["technical-description"]}, {"url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/middlewares/postExists.ts#L72-L77", "tags": ["technical-description"]}, {"url": "https://github.com/logchimp/logchimp/releases/tag/v0.9.3", "name": "logchimp v0.9.3 Release Notes", "tags": ["technical-description", "release-notes"]}, {"url": "https://www.vulncheck.com/advisories/logchimp-before-0.9.3-authorization-bypass-via-patch-api-v1-posts", "name": "VulnCheck Advisory: LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post authors to modify any other post by supplying mismatched postId and id body parameters. Attackers can set postId to their own post and id to an enumerated victim post UUID to overwrite its title, slug, content, boardId and roadmap_id."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-03T15:17:16.390Z"}}}, "cveMetadata": {"cveId": "CVE-2026-121560", "state": "PUBLISHED", "dateUpdated": "2026-11-03T16:42:29.845Z", "dateReserved": "2026-11-03T14:46:17.953Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-11-03T15:17:16.390Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:github/logchimp/logchimp", "product": "logchimp", "vendor": "logchimp", "versions": [{"lessThan": "0.9.3", "status": "affected", "version": "0.9.0-alpha.1", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post authors to modify any other post by supplying mismatched postId and id body parameters. Attackers can set postId to their own post and id to an enumerated victim post UUID to overwrite its title, slug, content, boardId and roadmap_id."}, {"lang": "es", "value": "LogChimp 0.9.0-alpha.1 anterior a la versi\u00f3n 0.9.3 contiene una vulnerabilidad de omisi\u00f3n de autorizaci\u00f3n que permite a autores de publicaciones autenticados modificar cualquier otra publicaci\u00f3n al proporcionar par\u00e1metros de cuerpo postId e id no coincidentes. Los atacantes pueden establecer postId a su propia publicaci\u00f3n y id al UUID de una publicaci\u00f3n de v\u00edctima enumerada para sobrescribir su t\u00edtulo, slug, contenido, boardId y roadmap_id."}], "id": "CVE-2026-121560", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-121560", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-03T16:42:12.790602Z", "version": "2.0.3"}}]}, "published": "2026-11-03T16:17:28.770", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/logchimp/logchimp"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/controllers/post/updatePost.ts#L67"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/logchimp/logchimp/blob/v0.9.2/packages/server/src/middlewares/postExists.ts#L72-L77"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/logchimp/logchimp/commit/a78b69af342908472ad400285187e43729295a7c"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/logchimp/logchimp/releases/tag/v0.9.3"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/logchimp-before-0.9.3-authorization-bypass-via-patch-api-v1-posts"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.9.0-alpha.1,0.9.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "logchimp", "source": "cna", "vendor": "logchimp"}, "product": "logchimp", "vendor": "logchimp"}], "created": "2026-11-03T17:15:02.103437+00:00", "updated": "2026-11-06T21:41:48.550450+00:00", "vendors": ["logchimp", "logchimp$PRODUCT$logchimp"]}