CVE-2026-82818

Name of the Vulnerable Software and Affected Versions dibo-software diboot version 3.8.0

Description Improper access controls exist within the Tenant Resource Assignment Handler component. A remote attacker can manipulate the tenantId argument at the '/api/iam/tenant/resource' endpoint to bypass security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the tenantId parameter in the '/api/iam/tenant/resource' endpoint until the issue is resolved.