CVE-2026-68951

GROWI, Inc. / GROWI PUBLISHED

Description (CNA)

GROWI contains an incorrect authorization vulnerability. If this vulnerability is exploited, an unauthenticated attacker could retrieve the other user's bookmark data.

Affected (CNA)

Vendor / product	Versions
GROWI, Inc. / GROWI	affected 0 through v8.0.0

CWE

CWE-863

References

https://growi.co.jp/news/46/
https://jvn.jp/en/jp/JVN42348352/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.