CVE-2026-2109

A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-266
• CWE-285

• https://github.com/nmmorette/vulnerability-research/blob/main/BFLA%20COCO%20Annotator%20in%20DELETE%20api%20undo/BFLA%20COCO%20Annotator%20in%20DELETE%20api%20undo%202f1ef09b8736807aa1f7ede4b64fa35d.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.344685Permissions Required, VDB Entry
• https://vuldb.com/?id.344685Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.745579Third Party Advisory, VDB Entry

Published

Feb 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-21084Improper access control in SmartThings prior to version 1.8.…6.9
• CVE-2026-21085Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2…6.7
• CVE-2026-21086Improper authorization in ProxyHandler prior to SMR Aug-2026…4.8
• CVE-2026-21087Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Rel…7.8
• CVE-2026-21088Improper input validation in loading a subtitle frame in lib…7.8
• CVE-2026-21089Improper input validation in removing style tag in libsubext…7.8
• CVE-2026-21090Out-of-bounds write in libsaviextractor.so prior to SMR Sep-…7.8
• CVE-2026-21091Out-of-bounds write in libcodec2secevrcdec.so prior to SMR S…7.8
• CVE-2026-21092Path traversal in ImsService prior to SMR Sep-2026 Release 1…5.3
• CVE-2026-21093Stack-based buffer overflow in PROCA trustlet prior to SMR S…6.7
• CVE-2026-21094Improper input validation in wpa_supplicant prior to SMR Sep…8.8
• CVE-2026-21095Heap-based buffer overflow in DNG decoder of libimagecodec.q…9.8