HoshinoSuzumi CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH HoshinoSuzumi CVE published 2026-10-16

CVE-2026-111650

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T17:39:17.995Z and has not been modified since then. The vulnerability allows unauthenticated attackers to reconfigure already configured instances by POSTing to /api/wizard/storage, potentially redirecting uploads and storage reads, and overwriting site and map settings. Defenders responsible for [truncated]