[ Vendor · 1 CVEs ]

blackcandy-org

CVEs affecting blackcandy-org published in the last 30 days, plus any blackcandy-org CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-97061 24 Sep 2026 CVSS 4.3 blackcandy-org Black CandyBlack Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authenticated user to enumerate all…