CVE-2026-115931 - Arbitrary file read and backend crash through unrestricted provider method calls
CVE ID :CVE-2026-115931 Published : Oct. 23, 2026, 11:17 p.m. | 57 minutes ago Description :Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper...