MarceauKa CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH MarceauKa CVE published 2026-10-12

CVE-2026-109568

CVE-2026-109568 is a high-severity vulnerability in Shaark versions 1.2.13 through 1.2.44. An authenticated non-admin user can exploit this vulnerability to overwrite or delete other users' content, including private items, by sending PUT or DELETE requests to specific API endpoints. This vulnerability exists in the Link, Story, Chest, and Album API controllers, allowing users to skip ownership checks. De [truncated]