CVE-2026-3053Disclosure(dinky / dinky)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppConfig.java of the component OpenAPI Endpoint. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

dinky CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Weakness type (CWE)

CWE-287CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

dinky

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 3 mentions (2026-02-24); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

dinky

Products

dinky

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	3	Disclosure3
2026-02-28	1	General1
2026-03-01	1	Disclosure1

Full discourse5 posts

Vulmon Vulnerability Feed@VulmonFeeds226d
Disclosure
CVE-2026-3053 Remote Authentication Bypass in DataLinkDC Dinky OpenAPI Endpoint ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3053 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
A new CVE (CVE-2026-3053) has been disclosed, describing a remote authentication bypass in the DataLinkDC Dinky OpenAPI Endpoint, with no PoC, exploit, or patch details provided.
0001053
4.0K followersView on X
CRAC Learning - Tech@cracbot221d
Disclosure
CVE-2026-3053 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file di..https://nvd.nist.gov/vuln/detail/CVE-2026-3053 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post reports a CVE-2026-3053 vulnerability in DataLinkDC dinky, noting its CVSS score and affected function, but provides no PoC, exploit, or patch details.
0000022
173 followersView on X
CRAC Learning - Tech@cracbot222d
General
CVE-2026-3053 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file di..https://nvd.nist.gov/vuln/detail/CVE-2026-3053 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post provides a brief technical overview of CVE‑2026‑3053, mentioning the affected component and CVSS score, but offers no Proof of Concept, exploit code, active exploitation evidence, or patch information.
0000022
173 followersView on X
CVE@CVEnew226d
Disclosure
CVE-2026-3053 A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/configure/AppC… https://www.cve.org/CVERecord?id=CVE-2026-3053
Post summary
CVE-2026-3053 is a disclosed vulnerability affecting DataLinkDC dinky up to version 1.2.5, specifically the addInterceptors function in the specified file.
00000117
56.5K followersView on X
RedPacket Security@RedPacketSec226d
Disclosure
CVE Alert: CVE-2026-3053 - DataLinkDC - dinky - https://www.redpacketsecurity.com/cve-alert-cve-2026-3053-datalinkdc-dinky/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3053 #datalinkdc #dinky
Post summary
The post is a brief CVE alert for CVE-2026-3053 with a link to a security advisory, but it contains no additional technical or exploit information.
00000101
3.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dinky	dinky	-	-	-

Explore more

Back to dashboard dinky CVEs dinky vulnerabilities

What researchers are saying

CVE-2026-3053

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new CVE (CVE-2026-3053) has been disclosed, describing a remote authentication bypass in the DataLinkDC Dinky OpenAPI Endpoint, with no PoC, exploit, or patch details provided.

CRAC Learning - Tech@cracbotDisclosure

The post reports a CVE-2026-3053 vulnerability in DataLinkDC dinky, noting its CVSS score and affected function, but provides no PoC, exploit, or patch details.

CRAC Learning - Tech@cracbotGeneral

The post provides a brief technical overview of CVE‑2026‑3053, mentioning the affected component and CVSS score, but offers no Proof of Concept, exploit code, active exploitation evidence, or patch information.

CVE@CVEnewDisclosure

CVE-2026-3053 is a disclosed vulnerability affecting DataLinkDC dinky up to version 1.2.5, specifically the addInterceptors function in the specified file.

RedPacket Security@RedPacketSecDisclosure

The post is a brief CVE alert for CVE-2026-3053 with a link to a security advisory, but it contains no additional technical or exploit information.