PT-2026-103663

CVE-2026-103534

Published

2026-10-01

Updated

2026-10-06

Description by

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions David-Crty databasement versions prior to 1.7.2

Description Improper access controls exist within the Snapshot Model component. This issue allows remote exploitation via the /api/v1/snapshots endpoint, specifically affecting the SnapshotPolicy.viewAny() and SnapshotPolicy.view() functions.

Recommendations Upgrade to version 1.7.2.

Exploitability

Exploit

Fix

Impacts

Researchers

Bytejmp

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

CWE-266: Incorrect Privilege Assignment