CVE-2026-59967 | TandoorRecipes Tandoor Recipes up to 2.6.9 BookmarkletImport /api/recipe-from-source/ privileges management

October 16, 2026 Yanac

A vulnerability labeled as critical has been found in TandoorRecipes Tandoor Recipes up to 2.6.9. Affected is an unknown function of the file /api/recipe-from-source/ of the component BookmarkletImport. Executing a manipulation can lead to improper privilege management.

The identification of this vulnerability is CVE-2026-59967. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More