{"schema_version":"1","data":[{"id":42037,"advisory_id":"a557ad73-31bb-4280-856c-50d85d34bd11","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110611","source_published_at":"2026-10-14T14:16:51.948+00:00","published_at":"2026-10-25T11:38:22.846419+00:00","extraction_method":"structured","technologies":["core-cve","rebuild"],"cve_ids":["CVE-2026-110611"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid","summary":"REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or chat-stream-stop to read, delete, exfiltrate, or interrupt AI assistant conversations.","evidence":"cve:CVE-2026-110611","products":[{"name":{"value":"rebuild","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110611","aliases":["CVE-2026-110611"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://github.com/getrebuild/rebuild","vendor":"getrebuild","product":"rebuild","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"4.5.0"}],"packageURL":"pkg:github/getrebuild/rebuild","collectionURL":"https://github.com","defaultStatus":"unaffected"}],"modified":"2026-10-20T01:10:36.770Z","provider":"cve","references":["https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/getrebuild-rebuild-aibot-chat-idor","https://github.com/getrebuild/rebuild/blob/48c6cc42f9c331cc57c057fa9c66d6cbda990131/src/main/java/com/rebuild/web/aibot/AiBot2Controller.java#L151-L203","https://github.com/getrebuild/rebuild/blob/48c6cc42f9c331cc57c057fa9c66d6cbda990131/src/main/java/com/rebuild/core/aibot2/ChatManager.java#L99-L101","https://www.vulncheck.com/advisories/rebuild-through-4.5.0-authorization-bypass-via-aibot2-chat-endpoints-chatid"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110611","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T01:08:37.024887Z"}}}],"references":[{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/getrebuild-rebuild-aibot-chat-idor","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T01:10:36.770Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-14T14:16:51.948Z"}}},"related_cves":[{"value":"CVE-2026-110611","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":32923,"advisory_id":"3abcb06f-b49e-492c-bdf5-66d32184f655","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-111667","source_published_at":"2026-10-16T17:39:29.644+00:00","published_at":"2026-10-25T08:57:43.41324+00:00","extraction_method":"structured","technologies":["core-cve","rebuild"],"cve_ids":["CVE-2026-111667"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"REBUILD through 4.5.0 Missing Authorization via /project/comments/list Endpoint","summary":"REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list endpoint to retrieve its comment content and attachment references.","evidence":"cve:CVE-2026-111667","products":[{"name":{"value":"rebuild","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-111667","aliases":["CVE-2026-111667"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/getrebuild/rebuild","vendor":"getrebuild","product":"rebuild","versions":[{"status":"affected","version":"0","versionType":"custom","lessThanOrEqual":"4.5.0"}],"packageURL":"pkg:github/getrebuild/rebuild","defaultStatus":"unaffected"}],"modified":"2026-10-16T18:25:28.071Z","provider":"cve","references":["https://hackmd.io/@hieuPenguinnn/getrebuild-rebuild-project-task-comment-idor","https://github.com/getrebuild/rebuild/blob/4.5.0/src/main/java/com/rebuild/web/project/TaskCommentController.java#L37-L62","https://www.vulncheck.com/advisories/rebuild-through-4.5.0-missing-authorization-via-project-comments-list-endpoint"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-111667","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T18:25:03.254459Z"}}}],"references":[{"url":"https://hackmd.io/@hieuPenguinnn/getrebuild-rebuild-project-task-comment-idor","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T18:25:28.071Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-16T17:39:29.644Z"}}},"related_cves":[{"value":"CVE-2026-111667","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":5643,"advisory_id":"57bb614d-e9c6-49d4-99d3-3c838b91d7ef","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102249","source_published_at":"2026-09-29T03:45:12.603+00:00","published_at":"2026-10-24T22:12:22.531304+00:00","extraction_method":"structured","technologies":["core-cve","rebuild"],"cve_ids":["CVE-2026-102249"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"REBUILD file-editor-save authorization","summary":"A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","evidence":"cve:CVE-2026-102249","products":[{"name":{"value":"REBUILD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102249","aliases":["CVE-2026-102249"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:rebuild:rebuild:*:*:*:*:*:*:*:*"],"vendor":"n/a","product":"REBUILD","versions":[{"status":"affected","version":"4.4.0"},{"status":"affected","version":"4.4.1"},{"status":"affected","version":"4.4.2"},{"status":"affected","version":"4.4.3"},{"status":"affected","version":"4.4.4"},{"status":"affected","version":"4.4.5"},{"status":"affected","version":"4.4.6"},{"status":"affected","version":"4.4.7"},{"status":"affected","version":"4.4.8"},{"status":"affected","version":"4.4.9"},{"status":"affected","version":"4.4.10"},{"status":"affected","version":"4.4.11"}]}],"modified":"2026-10-01T15:42:12.308Z","provider":"cve","references":["https://vuldb.com/vuln/411151","https://vuldb.com/vuln/411151/cti","https://vuldb.com/cve/CVE-2026-102249","https://vuldb.com/submit/933733","https://github.com/ASantsSec/CVE/issues/26"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102249","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-01T15:41:46.473837Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-01T15:42:12.308Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-29T03:45:12.603Z"}}},"related_cves":[{"value":"CVE-2026-102249","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":3858,"advisory_id":"435705c3-7d3e-4cac-abee-c83d09218057","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102248","source_published_at":"2026-09-29T03:30:15.312+00:00","published_at":"2026-10-24T21:42:30.44793+00:00","extraction_method":"structured","technologies":["core-cve","rebuild"],"cve_ids":["CVE-2026-102248"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Rebuild Login Endpoint login improper authentication","summary":"A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","evidence":"cve:CVE-2026-102248","products":[{"name":{"value":"Rebuild","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102248","aliases":["CVE-2026-102248"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:rebuild:rebuild:*:*:*:*:*:*:*:*"],"vendor":"n/a","modules":["Login Endpoint"],"product":"Rebuild","versions":[{"status":"affected","version":"4.4.0"},{"status":"affected","version":"4.4.1"},{"status":"affected","version":"4.4.2"},{"status":"affected","version":"4.4.3"},{"status":"affected","version":"4.4.4"},{"status":"affected","version":"4.4.5"},{"status":"affected","version":"4.4.6"},{"status":"affected","version":"4.4.7"},{"status":"affected","version":"4.5.0-beta1"},{"status":"affected","version":"4.5.0-beta2"},{"status":"affected","version":"4.5.0-beta3"},{"status":"affected","version":"4.5.0-beta4"},{"status":"affected","version":"4.5.0-beta5"}]}],"modified":"2026-09-29T17:00:11.613Z","provider":"cve","references":["https://vuldb.com/vuln/411150","https://vuldb.com/vuln/411150/cti","https://vuldb.com/cve/CVE-2026-102248","https://vuldb.com/submit/933708","https://github.com/ASantsSec/CVE/issues/25"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102248","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T16:59:56.902528Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T17:00:11.613Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-09-29T03:30:15.312Z"}}},"related_cves":[{"value":"CVE-2026-102248","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":42037,"next_before":3858}