VulnSocial

CVE-2026-11439Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from remote. Upgrading to version 15.0.6 can resolve this issue. It is recommended to upgrade the affected component.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-266CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-06); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-06: 1Mentions · 2026-06-07: 1Technical Details · 2026-06-06: 106-0606-07
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-061
Disclosure1
2026-06-071
General1
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-11439 A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Projec… https://www.cve.org/CVERecord?id=CVE-2026-11439

    Post summary

    CVE-2026-11439 is reported as a vulnerability in theonedev up to version 15.0.5 affecting an unspecified function within a file in the Parent Project component, but no further exploitation, patch, or PoC details are provided.

    00000180
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11439 Improper Authorization in Onedev Parent Project Handler Up to Version 15.0.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11439

    Post summary

    CVE-2026-11439 is identified as an Improper Authorization flaw in Onedev Parent Project Handler up to version 15.0.5; no PoC, exploit details, patch information, or active exploitation reports are provided.

    0000051
    4.0K followersView on X

Explore more

Back to dashboard