operacle vulnerabilities

Products

• checkcle 1

Latest operacle CVEs

Newest publication first

1. CVE-2026-112292 CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules

   Published 2026-10-19

   Critical·CVSS 9.3

   CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and delete records because shipped PocketBase collections use empty API rules. Attackers can query /api/collections/<name>/records endpoints to steal server...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.