CyberSecBulletin

MarceauKa vulnerabilities

We track 1 vulnerability in MarceauKa products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest MarceauKa vulnerabilities

  • 7.1 High severity

    Shaark: Authorization Bypass Through User-Controlled Key

    CVE-2026-109568MarceauKa

    Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/{link,story,chest,album}/{id} wit