rocboss CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH rocboss CVE published 2026-10-16

CVE-2026-111649

CVE-2026-111649 is an insecure direct object reference vulnerability in Rocboss paopao-ce through 0.6.0-alpha.3. The vulnerability is located in the DownloadAttachment endpoint and allows authenticated users to access private media by supplying arbitrary content IDs. This high-severity vulnerability has a CVSS score of 7.1 and can be exploited by attackers to enumerate sequential post_content IDs to obtai [truncated]