CVE-2026-44775: fallo de gravedad media en Kareadita Kavita
Kavita: No authentication at /api/Reader/image
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.3%
Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [AllowAnonymous], allowing completely unauthenticated access to page images from any chapter in any library. While the endpoint accepts an apiKey parameter, it is never validated. Since entity IDs are sequential integers, an unauthenticated attacker can trivially enumerate all content on the server. This vulnerability is fixed in 0.9.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Kareadita · KavitaCVEs relacionadas — Kareadita Kavita
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-51024HIGHKavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload EndpointEPSS 0.6%CVE-2024-39307LOWCross-Site Scripting (XSS) vulnerability via crafted ebooks in KavitaEPSS 0.5%CVE-2026-110223LOWKavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file EndpointEPSS 0.3%CVE-2026-44776MEDIUMKavita: IDOR in /api/Download/*EPSS 0.3%CVE-2026-47202CRITICALKavita: Pre-Auth Account TakeoverEPSS 0.2%