CVE-2026-80207 | APITable up to 1.13.0-beta.1 InternalNotifyController create fromUserId access control

A vulnerability described as problematic has been identified in APITable up to 1.13.0-beta.1. This issue affects some unknown processing of the file /api/v1/internal/notification/create of the component InternalNotifyController. Executing a manipulation of the argument fromUserId can lead to improper access controls.

This vulnerability appears as CVE-2026-80207. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More