/

CVE-2026-121945

Severity:

HIGH RISK

(7.6)

CVE-2026-121945

Received

Vulnerability type

Category:

CWE:

CWE-639

Impact:

Severity:

HIGH RISK

(7.6)

CVSS version:

3.1

Catch this CVE while code is being written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Sources

SourceLink
github.comgithub.com/coopcycle/coopcycle-web/blob/v6.19.1/src/Entity/Incident/Incident.php#L43-L71
github.comgithub.com/coopcycle/coopcycle-web/commit/d997393d128afa1febe34e8f295b9511c12d19a0
github.comgithub.com/coopcycle/coopcycle-web/issues/5390
hackmd.iohackmd.io/@hieund/coopcycle-incident-courier-cross-tenant-bola
vulncheck.comvulncheck.com/advisories/coopcycle-coopcycle-web-before-6.20.1-idor-via-incident-resource-and-action-endpoint
hackmd.iohackmd.io/@hieund/cve-2026-121945-coopcycle-incident-courier-cross-tenant-bola
Find out what's already
exploitable in your codebase.