EN

en direct

CVE-2025-15662 · CVSS 8.6 CVE-2025-50455 · CVSS 9.1 CVE-2025-59172 · CVSS 8.5 CVE-2025-68686 · Fortinet FortiOS

type de faiblesse

CWE-15

1: vulnérabilité suivie
15 juillet 2026: dernière publication

cve

Veille des vulnérabilités

identifiantvulnérabilitésévéritépublié

CVE-2026-46485Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality despite configured permissions, allowing unauthorized modification of dashboard configuration and potential service disruption. This issue is fixed in version 4.0.8. Élevée CVSS 8.2 15/07