Skip to content
Threat Feed
Subscribe

Tag

Data-Tampering

2 briefs RSS
high advisory

NL Portal IDOR Vulnerability Allows Tampering and Data Leakage of Other Users' Tasks (CVE-2026-49464)

An Insecure Direct Object Reference (IDOR) vulnerability, CVE-2026-49464, in NL Portal's Taak V2 implementation (versions 1.5.0 through 3.0.0) allows authenticated attackers to mark other users' tasks as complete, overwrite submitted data, and leak personal information by exploiting an authorization bypass in the `submitTaakV2` GraphQL endpoint.

NL Portal Taak idor graphql data-tampering data-leakage authentication-bypass cve
2t
high advisory

NVIDIA Jetson JetPack Insecure Default Initialization Vulnerability (CVE-2026-24148)

CVE-2026-24148 is a vulnerability in NVIDIA Jetson for JetPack's system initialization logic, where an unprivileged attacker can cause the initialization of a resource with an insecure default, potentially leading to information disclosure, data tampering, and denial of service.

cve-2026-24148 nvidia-jetson insecure-default information-disclosure data-tampering denial-of-service
2r 2t 1c