VulnSocial

CVE-2026-92716

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary user IDs to generate valid API keys for users in different organizations, enabling account takeover across tenant boundaries.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-05: 111-05
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve

    🔴 Shuffle, Cross-Tenant Privilege Escalation, #CVE-2026-92716 (High) Just Updated -DC-Nov2026-4205 https://dailycve.com/shuffle-cross-tenant-privilege-escalation-cve-2026-92716-high-just-updated-dc-nov2026-4205/

    0000029
    253 followersView on X

Explore more

Back to dashboard