Skip to content
Threat Feed
Subscribe

Vendor

Gophish

2 briefs RSS
high advisory

CVE-2026-107270: IDOR Vulnerability in Gophish API

Gophish versions 0.12.1 and earlier are vulnerable to an Insecure Direct Object Reference (IDOR) flaw allowing authenticated users to modify or hijack unauthorized administrative objects.

Gophish idor api-vulnerability privilege-escalation
1r 1t 1c
high advisory

Gophish API Authentication Middleware Bypass

Gophish versions through 0.12.1 contain a vulnerability in the API authentication middleware that fails to enforce account lockout and password change requirements, allowing attackers with valid API keys to maintain persistent unauthorized access.

Gophish web-application authentication-bypass api-security
1t 1c