CVE-2026-115329 | uselotus Lotus up to 0.10.2 Subscription SubscriptionViewSet.get_object subscription_id resource injection

October 22, 2026 Yanac

A vulnerability was found in uselotus Lotus up to 0.10.2 and classified as critical. Affected by this vulnerability is the function SubscriptionViewSet.get_object of the component Subscription. Such manipulation of the argument subscription_id leads to improper control of resource identifiers.

This vulnerability is uniquely identified as CVE-2026-115329. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More