https://vulnogram.org/ Most recent CVEs assigned by linqi GmbH (linqi). https://vulnogram.org/seaview/icons/linqi.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2026-11369 https://vulnogram.org/CVE-2026-11369 The Comment API (GET /api/Comment and POST /api/Comment) in the affected application fails to perform authorization checks to verify that the requesting user has access to the object identified by the relatedObjectId. This Insecure Direct Object Refe… High Fri, 05 Jun 2026 12:37:46 GMT https://vulnogram.org/CVE-2026-11346 https://vulnogram.org/CVE-2026-11346 A Server-Side Request Forgery (SSRF) vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker… Medium Fri, 05 Jun 2026 11:31:06 GMT https://vulnogram.org/CVE-2026-11345 https://vulnogram.org/CVE-2026-11345 An Improper Authentication vulnerability in the /api/Cdn/GetFile endpoint of linqi allows unauthenticated, remote attackers to bypass file access controls. The ValidateAnonFileAccess function incorrectly grants access if an 'AnonFile' query parameter… Medium Network Exploitable Fri, 05 Jun 2026 11:29:52 GMT https://vulnogram.org/CVE-2026-11347 https://vulnogram.org/CVE-2026-11347 The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for AES/CBC encryption, making known-plaintext attacks… High Fri, 05 Jun 2026 10:18:35 GMT