PatchSiren

lissy93 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH lissy93 CVE published 2026-07-15

CVE-2026-46485

CVE-2026-46485 is a HIGH severity vulnerability in Dashy, a self-hostable personal dashboard. Prior to version 4.0.8, deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality, despite configured permissions. This could lead to unauthorized modification of dashboard configuration and potential se [truncated]