Skip to contentTduckcloud Tduck-survey-form vulnerabilities
- tduckcloud tduck-survey-formTDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}CVE-2026-1116215.3 Medium
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/saveCVE-2026-1091675.3 Medium
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/createCVE-2026-1091655.3 Medium
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}CVE-2026-1091647.1 High
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Write Password Bypass via Client-Side EnforcementCVE-2026-1003066.9 Medium
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission EndpointCVE-2026-1003055.3 Medium
- tduckcloud tduck-survey-formTDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership CheckCVE-2026-1003046.0 Medium
- tduckcloud tduck-survey-formTDuck survey form through 6.0 Missing Authorization in Form Theme Management EndpointsCVE-2026-1003035.3 Medium
- tduckcloud tduck-survey-formTDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLCVE-2026-926027.1 High
- tduckcloud tduck-survey-formTDuck survey form through 5.0 Unauthorized Data ModificationCVE-2026-925677.1 High