Advisories · Technology

APIPark.

Every CVE that names APIPark among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111680 CVE record

CVSS 7.2 High

APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter
- APIPark
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-108862 CVE record

CVSS 6.0 Medium

APIPark through 1.9.7-beta IDOR via application authorization endpoints
- APIPark
- Broken access control
Not analysed yet 11 Oct 2026