CVE-2026-6375

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls. Because PNR identifiers follow a predictable pattern, an attacker could systematically enumerate valid records and obtain associated passenger names. This flaw stems from missing authorization checks on an endpoint intended for authenticated profile access.

• CWE-639

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-04

Published

Apr 23, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63744SurrealDB before 3.1.5 contains a server-side request forger…5.1
• CVE-2026-63745SurrealDB versions before 3.1.0 contain an authorization byp…5.4
• CVE-2026-63746SurrealDB versions before 3.1.0 fail to enforce table SELECT…7.1
• CVE-2026-63747SurrealDB versions before 3.1.0 contain a denial of service …8.7
• CVE-2026-63748SurrealDB versions before 3.1.0 contain an information discl…5.3
• CVE-2026-63749SurrealDB versions before 3.1.0 contain an authentication by…5.3
• CVE-2026-63750SurrealDB versions before 3.1.0 fail to apply the SURREAL_WE…7.5
• CVE-2026-63751SurrealDB versions before 3.1.0 contain a field-level permis…5.3
• CVE-2026-63752SurrealDB before 3.1.0 contains an authorization bypass vuln…5.3
• CVE-2026-63753SurrealDB before 3.1.0 fails to refresh authentication state…5.3
• CVE-2026-63754SurrealDB versions before 3.1.0 contain a denial of service …7.1
• CVE-2026-63755SurrealDB before 3.1.0 evaluates user-supplied WHERE clauses…7.1