Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credentials by posting an arbitrary webui object to the config_data dictionary. Attackers can exploit insufficient deny-list filtering to permanently replace stored login credentials, lock out legitimate administrators, and gain persistent access to all configured tasks, cloud tokens, and notification services.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-45229 Mass Assignment Vulnerability in Quark Drive Before 0.8.5 Allows Administrator Credential Overwrite https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45229
Post summary
The post announces CVE-2026-45229, a mass assignment flaw in Quark Drive before 0.8.5 that permits administrator credential overwrite, but it contains no PoC, exploit code, active exploitation notes, or patch information.
CVE-2026-45229 Quark Drive before 0.8.5 contains a mass assignment vulnerability in the POST /update endpoint that allows authenticated attackers to overwrite administrator credenti… https://www.cve.org/CVERecord?id=CVE-2026-45229
Post summary
A mass assignment flaw in Quark Drive versions prior to 0.8.5 enables authenticated attackers to overwrite administrator credentials via the /update endpoint.