POJIA破甲
地图 / CVE-2026-48616

CVE-2026-48616

Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files.

NVD CVSS
—
CWE
—
未来 30 天被利用概率
0.3%
利用等级
低概率(<1%)
发布时间
—

关联的公开报告 1 份

Unauthenticated reading of every file via livechat auth and predicting MongoDB ObjectId()Rocket.Chat · 高危 · 2026-06-15