Assassin game vulnerabilities

2 known vulnerabilities in Assassin game from Gaudire. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.2 Critical severity

  Assassin game: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-7166Jun 22, 2026Gaudire

  Vulnerability involving the exposure of sensitive data provided without adequate protection. The API exposes email and phone number data from the ‘email’ and ‘telefon’ fields. This vulnerability is also present in the local database, as it contains accessible

• 9.4 Critical severity

  The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and…

  CVE-2026-7165Jun 22, 2026Gaudire

  The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador' and 'keyJugadorObjectiu' parameters allow the modification of other users’ information without requiring prior authorization validation. This could enable an authenticated attacker