Post

CryptoCat

@cryptocat.me

cryptocat.meAmelia Missing Authorization to Limited Account Takeover | CVE-2026-14311 | CryptoCat's BlogRoot cause analysis of CVE-2026-14311 in Amelia, where a customer endpoint authenticated the provider token but never checked which customer the provider owned, letting any Employee read, edit, and re...

18/9/26, 9:15 am·0 reposts·0 likes