{
  "url": "https://www.videodioggi.com/cve-2026-10-26-en.html",
  "title": "CVE of the day — CVE-2026-115933 (CVSS 9,9, criticism)",
  "language": "en",
  "published": "2026-10-26T04:19:40.858Z",
  "modified": "2026-10-26T04:19:40.858Z",
  "summary": "CVE-2026-115933: critical vulnerability, CVSS 9,9/10, type CWE-290, exploitable remotely, with low privileges, without user interaction. Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the..",
  "keywords": [
    "c",
    "cf",
    "vulnerability",
    "critical vulnerability",
    "cween-290",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "key_facts": [
    "CVE-2026- 1159 — CVE-2026-115933: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database.",
    "CWE-290 — Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed..",
    "Exposure and mitigation — Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
  ],
  "transcript": "CVE-2026-115933: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database. Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed.. Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "video": {
    "mp4": "https://www.videodioggi.com/videos/cve-2026-10-26-en.mp4",
    "poster": "https://www.videodioggi.com/videos/cve-2026-10-26-en.jpg",
    "duration_seconds": 20
  },
  "source": "www.videodioggi.com",
  "generator": "videodioggi procedural video engine"
}