VYPR

ThriveX-Server

by ThriveX Server

CVEs (1)

  • CVE-2026-110131MedOct 13, 2026
    risk 0.34cvss 5.3epss —

    ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply…