Gitroomhq Postiz-app vulnerabilities

• gitroomhq postiz-app Forged signed tokens let any registered user take over other users and organizations CVE-2026-115933 9.9 CriticalOctober 24, 2026
• gitroomhq postiz-app Path traversal in post media lets any registered user read server files CVE-2026-115932 9.6 CriticalOctober 24, 2026
• gitroomhq postiz-app Arbitrary file read and backend crash through unrestricted provider method calls CVE-2026-115931 9.9 CriticalOctober 23, 2026
• gitroomhq postiz-app Channel tokens and organization API key exposed in API responses CVE-2026-107761 5.3 MediumOctober 11, 2026
• gitroomhq postiz-app Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key CVE-2026-94455 7.1 HighSeptember 22, 2026
• gitroomhq postiz-app Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys CVE-2026-94456 9.1 CriticalSeptember 22, 2026
• gitroomhq postiz-app Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover CVE-2026-19264 Public exploit 9.3 CriticalAugust 7, 2026
• gitroomhq postiz-app Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions CVE-2026-19127 6.5 MediumAugust 6, 2026
• gitroomhq postiz-app Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook CVE-2026-48799 7.7 HighJuly 15, 2026
• gitroomhq postiz-app Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription CVE-2026-48783 4.8 MediumJune 16, 2026
• gitroomhq postiz-app Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery CVE-2026-48781 9.9 CriticalJune 16, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz stored XSS in public preview page CVE-2026-42556 8.9 HighMay 8, 2026
• gitroomhq postiz-app Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths CVE-2026-42346 6.5 MediumMay 8, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev CVE-2026-42298 Public exploit 10.0 CriticalMay 8, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS CVE-2026-40487 Public exploit 8.9 HighApril 18, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream CVE-2026-40168 8.2 HighApril 10, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation CVE-2026-34590 5.4 MediumApril 2, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Check CVE-2026-34577 8.6 HighApril 2, 2026
• gitroom postiz, gitroomhq postiz-app +1 more Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata CVE-2026-34576 8.3 HighApril 2, 2026
• gitroomhq postiz-app Postiz allows header mutation in middleware facilitates resulting in SSRF CVE-2025-53641 8.2 HighJuly 11, 2025