CVE-2026-32252 — Chartbrew is an open-source web application that can connect directly to…

/HIGH
CVE Notify vulnerabilitycve
CVE-2026-32252 — Chartbrew is an open-source web application that can connect directly to…

🚨 CVE-2026-32252 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.9.0, a cross-tenant authorization bypass exists in Chartbrew in GET /team/:teamid/template/generate/:projectid.

:lock: fixed cross-tenant operations for the template api route · chartbrew/chartbrew@bf59190
github.com

What This Means For You

  • New vulnerability disclosed — verify if your stack is exposed.

Related ATT&CK Techniques

T1078.004 Abuse Cloud Infrastructure Persistence T1528 Steal Application Access Token Credential Access T1190 Exploit Public-Facing Application Initial Access

Indicators of Compromise

IDTypeIndicator
CVE-2026-32252 Vulnerability CVE-2026-32252
🔎
Get the full picture on this threat Use /org to search affected organizations, generate IOC briefs with /brief, and set watchlist alerts — inside Telegram.
Try Intel Bot →
Source & Attribution
Source PlatformTelegram
ChannelCVE Notify
Channel ID1129491012
Message ID158851
PublishedApril 10, 2026 at 23:27 UTC
Original Linkhttps://github.com/chartbrew/chartbrew/commit/bf5919043d3...

This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.

Believe this infringes your rights? Submit a takedown request.