Swetrix CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Swetrix CVE published 2026-10-14

CVE-2026-110621

Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation, potentially leading to unauthorized access or changes. This vulnerability affects instances with multiple organisations and projects, requiring defenders to assess exposure and potential impact. Th [truncated]