CVE-2026-1835

A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown part. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

• CWE-352
• CWE-862

• https://github.com/webzzaa/CVE-/issues/6
• https://vuldb.com/?ctiid.344028
• https://vuldb.com/?id.344028
• https://vuldb.com/?submit.742484

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-18344The Wp Responsive Thumbnail Slider plugin for WordPress is v…6.1
• CVE-2026-18345The WP User Manager plugin for WordPress is vulnerable to un…4.3
• CVE-2026-18346The TikTok plugin for WordPress is vulnerable to authorizati…5.3
• CVE-2026-18347The Kirki – Freeform Page Builder, Website Builder & Customi…4.3
• CVE-2026-18348Missing authorization check in the upload_azure, upload_sftp…4.1
• CVE-2026-18349Improper protection against voltage and clock glitches vulne…7.3
• CVE-2026-18351The Drag and Drop File Upload for Elementor Forms plugin for…9.8
• CVE-2026-18352The User Access Manager plugin for WordPress is vulnerable t…7.5
• CVE-2026-18353PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT a…8.8
• CVE-2026-18355A heap buffer overflow flaw was found in the SASL I/O layer …7.5
• CVE-2026-18356The Limit Login Attempts Reloaded WordPress plugin before 3.…3.7
• CVE-2026-18357The WPC Order Tip for WooCommerce WordPress plugin before 3.…7.5