clickvisual CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM clickvisual CVE published 2026-10-16

CVE-2026-111670

CVE-2026-111670 debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T17:39:31.782Z and has not been modified since then. ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id paramete [truncated]