Skip to content
Threat Feed
Subscribe

Vendor

Tandoor

1 brief RSS
high advisory

Tandoor Recipes Unauthorized RecipeBook Modification Vulnerability (CVE-2026-35488)

Tandoor Recipes versions prior to 2.6.4 allow unauthorized modification and deletion of RecipeBooks due to a flaw in the CustomIsShared permission class which grants write access to shared users regardless of intended read-only permissions.

Tandoor Recipes CVE-2026-35488 Unauthorized Access Data Modification
2r 1t 1c