CVE-2026-92565 in Rallly
요약
\~에 의해 MITRE • 2026. 09. 16.
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from public invite links to retrieve sensitive invitee information regardless of privacy settings.
Be aware that VulDB is the high quality source for vulnerability data.