CVE-2026-82879

DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another (ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo). The POST /de2api/share/validate endpoint issues a LinkToken after password verification without requiring a ticket, bypassing the 'ticket mandatory' policy. Additionally, the ticket create and delete endpoints (POST /de2api/ticket/saveTicket, POST /de2api/ticket/delTicket) lack share-ownership checks, allowing an authenticated user who knows another user's ticket to modify, rebind, or delete it (denial of service), and GET /de2api/share/queryRelationByUserId/{uid} allows authenticated users to enumerate other users' share mappings.

• CWE-863

• https://github.com/dataease/dataease
• https://github.com/dataease/dataease/commit/fbbb0482c4c10480c2dd4ecc050cd1e5c55b17db
• https://github.com/dataease/dataease/releases/tag/v2.10.26
• https://github.com/dataease/dataease/security/advisories/GHSA-9h54-39gh-5qfg
• https://www.vulncheck.com/advisories/dataease-before-2.10.26-access-control-bypass-via-share-tickets

Published

Aug 31, 2026

Last Modified

Aug 31, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82873ToolJet through 3.0.0-ee-beta.2 contains authorization bypas…5
• CVE-2026-82874ToolJet before v3.16.208 fails to validate that authenticate…9.9
• CVE-2026-82875ToolJet before v3.16.208 contains an authorization bypass vu…5.5
• CVE-2026-82876Phison PS3111-S11 controller firmware verifies RSA signature…8.2
• CVE-2026-82877ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 thro…6.5
• CVE-2026-82878DataEase versions before 2.10.26 omit object-level authoriza…6.3
• CVE-2026-8288A vulnerability was determined in Open5GS up to 2.7.7. This …6.5
• CVE-2026-82880YaCy Search Server through 1.941 contains an XML external en…7.5
• CVE-2026-82881Aix-DB through 1.2.4 renders markdown with raw HTML enabled …5.4
• CVE-2026-82882Devtron through 2.2.0 fails to enforce authorization checks …8.8
• CVE-2026-82883Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2026-82884The All in One SEO WordPress plugin before 5.0.0.1 does not …6.8