CVE-2026-15594Disclosure

LOWCVSS 2.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler. The manipulation of the argument storageKey results in improper authorization. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-266CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-15594 A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component … https://www.cve.org/CVERecord?id=CVE-2026-15594 ----- Traducción: CVE-2026-15594 Se … http://infoflow.cloud`
Post summary
A new CVE, CVE‑2026‑15594, affecting waooAI waoowaoo up to version 0.4.ומות, has been disclosed with minimal technical information; no exploitation, patch, or activeвался exploitation details are present.
0000038
92 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-15594 A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component … https://www.cve.org/CVERecord?id=CVE-2026-15594
Post summary
CVE-2026-15594 identifies a vulnerability in waooAI waoowaoo up to version 0.4.1, affecting the stablePublicIdFromStorageKey function within src/lib/media/hash.ts; no PoC, exploit, patches, or active exploitation are mentioned.
00000745
57.8K followersView on X

Explore more

Back to dashboard