[ Vendor · 9 CVEs ]
TDuckCloud
CVEs affecting TDuckCloud published in the last 30 days, plus any TDuckCloud CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111621 | 16 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authenticated user to read other owners' raw form… | |
| CVE-2026-109167 | 12 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users… | |
| CVE-2026-109164 | 12 Oct 2026 | CVSS 7.1 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form… | |
| CVE-2026-109165 | 12 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via… | |
| CVE-2026-100306 | 25 Sep 2026 | CVSS 5.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote… | |
| CVE-2026-100303 | 25 Sep 2026 | CVSS 5.4 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated… | |
| CVE-2026-100304 | 25 Sep 2026 | CVSS 5.3 | TDuckCloud tduck-survey-formTDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist… | |
| CVE-2026-100305 | 25 Sep 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated submission endpoint POST /user/form/data/create… | |
| CVE-2026-95829 | 23 Sep 2026 | CVSS 6.3 | TDuckCloud tduck-platformA vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function… |