nduckmink has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 4.3 (medium). The most common weakness class is CWE-639 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.3
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- arkon 3
Worst active — by depth score
nduckmink vulnerabilities
CVEs affecting nduckmink, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-111715Medium· 4.3Arkon through 0.9.2 Missing Authorization via Wiki Graph Neighborhood API
Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read other departments' wiki metadata by supplying a foreign slug. Attackers with only wiki:read:own_dept permiss…
CVE-2026-111716Medium· 5.4Arkon through 0.9.2 Broken Access Control via Sources By-ID Routes
Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip can_access_document. Attackers can c…
CVE-2026-111717Medium· 4.3PoCArkon through 0.9.2 Missing Authorization via Skills Versions API
Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can_access_skill check. Attackers holding th…