https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T00:39:02.314610+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82279 fkie_cve-2026-82279 2026-10-02T00:39:02.317038+00:00

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH /team/name, and DELETE /team/member endpoints.

 https://vulnerability.circl.lu/vuln/ghsa-gcxp-837c-3488 GHSA-gcxp-837c-3488 2026-10-02T00:39:02.317331+00:00

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH /team/name, and DELETE /team/member endpoints.