CVE-2026-113595 in Sharkordinfo

Summary

by MITRE • 10/20/2026

Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE_SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulnCheck

Reservation

10/20/2026

Disclosure

10/20/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-113595
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-113595
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-113595/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!