Jλckλι@J4ck3LSyN
CVE-2026-119757 CVE-2026-119705 CVE-2026-123488 CVE-2026-85956 #CyberSecurity #infosec https://t.co/S8pMPbfB0r
21032156.1K
7.8K followersView on X
CVE-2026-119705
LOWCVSS 6.9 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser() is never called. Attackers can repeatedly POST to /api/notify, optionally with a domain parameter, to exhaust SMTP rate limits, trigger provider abuse flags and flood recipients.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-306
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day