Chiline Cloud
Monthly
Insecure Direct Object Reference in Chiline Cloud (Inventec Appliances) versions up to and including 4.5.9 exposes sensitive user data to unauthenticated remote attackers. By manipulating a specific request parameter - likely a user identifier or resource key - an attacker can bypass authorization checks and read account data belonging to arbitrary other users. Reported by TWCERT and catalogued under EUVD-2026-55925, no public exploit code or active exploitation has been confirmed at time of analysis, though the trivial exploitation conditions (network-accessible, no authentication, no user interaction) make this a high-priority disclosure risk.
Insecure Direct Object Reference in Chiline Cloud (Inventec Appliances) versions up to and including 4.5.9 exposes sensitive user data to unauthenticated remote attackers. By manipulating a specific request parameter - likely a user identifier or resource key - an attacker can bypass authorization checks and read account data belonging to arbitrary other users. Reported by TWCERT and catalogued under EUVD-2026-55925, no public exploit code or active exploitation has been confirmed at time of analysis, though the trivial exploitation conditions (network-accessible, no authentication, no user interaction) make this a high-priority disclosure risk.