Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows authenticated users with access to one project to update or delete a SharePolicy record that belongs to a different project. The affected routes authorize the caller against the project in the URL path, but they never verify that policy_id belongs to that project. This permits cross-project modification of dashboard sharing rules, including visibility, password requirements, allowed parameters, and expiration settings. This issue has been patched in version 5.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-40600 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows auth… https://www.cve.org/CVERecord?id=CVE-2026-40600
Post summary
The statement references CVE‑2026‑40600 and notes an affected version of Chartbrew but gives no details on the vulnerability, exploitation, or remediation.
CVE-2026-40600 Improper Authorization in Chartbrew 4.9.0 Allows Cross-Project SharePolicy Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40600
Post summary
A new CVE (CVE‑2026‑40600) has been disclosed, detailing an improper authorization flaw in Chartbrew 4.9.0 that permits cross‑project SharePolicy modifications, with no indications of exploitation or remediation yet.
🚨*CVE* CVE-2026-40600 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows auth… https://www.cve.org/CVERecord?id=CVE-2026-40600 ----- Traducción: CVE-2026-40600 Cha… http://infoflow.cloud`
Post summary
The post lists the CVE and a brief mention of the affected application, but provides no substantive details on exploitation, mitigation, or severity.