CVE-2026-48771

ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed due to improperly secured client-side database configuration and insufficient access control policies. Applications using publicly exposed database credentials or permissive database rules may allow unauthorised users to read, modify, or abuse stored form submission data. This could impact personally identifiable information (PII) submitted through the website contact form, including names, email addresses, phone numbers, and messages. The issue has been patched in version 1.0.1. Users unable to upgrade immediately can reduce risk by disabling public read/write database access, rotating exposed API keys, restricting database policies to authenticated requests only, moving sensitive operations to secure backend/serverless functions, and/or monitoring database activity logs for suspicious access.

• CWE-200

• https://github.com/Ishankjha740/ishankportfolio/security/advisories/GHSA-44fc-h2mc-cw9g

Published

Aug 11, 2026

Last Modified

Aug 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48765TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …9.9
• CVE-2026-48766TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …7.6
• CVE-2026-48767TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …7.6
• CVE-2026-48768TypeBot is a chatbot builder tool. In versions 3.16.1 and ea…9.3
• CVE-2026-4877A security flaw has been discovered in itsourcecode Payroll …4.3
• CVE-2026-48770Notepad++ is a free and open-source source code editor. Prio…5
• CVE-2026-48772ProxySQL is a proxy for MySQL and its forks, as well as Post…10
• CVE-2026-48773ProxySQL is a proxy for MySQL and its forks, as well as Post…9.8
• CVE-2026-48774ProxySQL is a proxy for MySQL and its forks, as well as Post…7.5
• CVE-2026-48775LangGraph SQLite Checkpoint is an implementation of LangGrap…6.8
• CVE-2026-48776LangGraph Python SDK is used to connect to running LangGraph…9.1
• CVE-2026-48777FileBrowser Quantum is a free, self-hosted, web-based file m…9.3