kerwincui CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM kerwincui CVE published 2026-10-16

CVE-2026-111654

CVE-2026-111654 is a vulnerability in FastBee through version 2.1.0, which allows authenticated low-privilege users to access other users' device groups due to insecure direct object references in the GroupController queries. This could enable attackers, including self-registered users, to read, overwrite, reassign, rewrite device associations of, or delete other users' groups by supplying sequential group IDs.