CVE-2026-29788highCWE-1287CWE-283

CVE-2026-29788: falha de alta gravidade em miraheze TSPortal

TSPortal: Anyone can forge self-deletion requests of any user

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TSPortal+ Monitorar miraheze/ts-portal

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.4epss 0.3%
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been patched in version 30.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H
Produtos afetados
miraheze · TSPortal
CVEs relacionadas — miraheze TSPortal

No mesmo produto, das mais perigosas para as menos.

CVE-2026-33541MEDIUMTSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of ServiceEPSS 0.3%