CVE-2026-61726 Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content exploit

Exploit for CVE-2026-61726. CVSS 8.1.

Published 16 Oct 2026Updated 16 Oct 202644 sources
CVSS 8.1 PoC CANDIDATE

Source timeline

Discovered through SploitusView source ↗