← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
Able to bypass authorization logic and gain more access then intended
业务逻辑
/
Unlabeled
/ #3713965
厂商
GitHub
严重程度
低危
赏金
—
弱点
Unlabeled
研究员
@vaib25vicky
披露日期
2026-07-15
资产
github.com
CVE
CVE-2026-9106
该报告还没有中文解读。
时间线
2026-05-05
报告提交
2026-07-15
公开披露
阅读 HackerOne 原文 ↗
作者 @vaib25vicky · 版权归作者与 GitHub 所有
同类报告
Golden techniques to bypass host validations in Android apps
██████ · —
Lack of Rate Limiting on Account Creation Endpoint
XVIDEOS · 2025-01-16 · $200
SMAP bypass
PlayStation · 2021-05-27
Rate limit bypass on passport.acronis.work using X-Forwarded-For request header
Acronis · 2024-11-28
Using special IPv4-mapped IPv6 addresses to bypass local IP ban
Cloudflare Public Bug Bounty · 2023-01-24 · $7,500
RCE, SQLi, IDOR, Auth Bypass and XSS at [staff.███.edu.eg ]
██████ · —