PKP CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM PKP CVE published 2026-10-16

CVE-2026-111609

CVE-2026-111609 is a medium-severity vulnerability in PKP Open Journal Systems through 3.5.0-5, allowing journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription IDs. This insecure direct object reference vulnerability could lead to unauthorized access and subscription manipulation. Defenders responsible for managing and securing PKP Open Journal Systems [truncated]