{"uuid": "dab28376-8a3a-45ee-8ae0-4252bd945b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77520", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117409226693721887", "content": "CVE-2026-77520: MaxKB 2.10.2-lts and earlier leaks app IDs via the question-ranking endpoint, bypassing access controls. CVSS 5.4, unpatched. Restrict ranking endpoint access and patch now. https://www.valtersit.com/cve/CVE-2026-77520/ #CVE #infosec #MaxKB", "creation_timestamp": "2026-10-09T05:10:24.891826Z"}