APIParkLab has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 6.8 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- APIPark 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-111680High· 8.3APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter46CVE-2026-108862Medium· 5.3APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID29
APIParkLab vulnerabilities
CVEs affecting APIParkLab, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111680High· 8.3APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter
APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can …
▾ TwilightAPIParkLab · APIParkvia CVEORG
CVE-2026-108862Medium· 5.3APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID. Attackers with authorization-view pe…
▾ SunlitAPIParkLab · APIParkEPSS 0.23%via NVD