[ Vendor · 3 CVEs ]

nduckmink

CVEs affecting nduckmink published in the last 30 days, plus any nduckmink CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-111717 16 Oct 2026 CVSS 4.3 nduckmink arkonArkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other…
CVE-2026-111715 16 Oct 2026 CVSS 4.3 nduckmink arkonArkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read other departments'…
CVE-2026-111716 16 Oct 2026 CVSS 5.4 nduckmink arkonArkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources…