CVE-2026-100303 in tduck-survey-form
Zusammenfassung
von MITRE • 25.09.2026
TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated non-admin users can add, modify, or delete themes and theme categories affecting forms owned by other users.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.