CVE-2026-119565Medium· 4.3▾ SunlitPlausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter. Attackers can submit traf…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter. Attackers can submit traffic_change_notification[site_id] set to another site's primary key via PUT /sites/:domain/traffic-change-notification/:type to receive that site's traffic alerts and visitor figures.
analytics <= 3.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-119564Medium· 5.3Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs
CVE-2026-123526Medium· 5.4Vikunja before 2.7.1 Mass Assignment via Team external_id Field
CVE-2026-17117Critical· 9.9Multiple Vulnerabilities in IBM API Connect
CVE-2026-17394Critical· 9.6Multiple Vulnerabilities in IBM API Connect
CVE-2026-122053Medium· 6.9Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects
CVE-2026-123490High· 8.8Craft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox Bypass