CyberSecBulletin

PoxenStudio vulnerabilities

We track 2 vulnerabilities in PoxenStudio products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.

2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score

Latest PoxenStudio vulnerabilities

  • 8.7 High severity

    talebook: Missing Authorization

    CVE-2026-45273PoxenStudio

    MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py applies the auth decorator but does not check the self.admin_user property, unli

  • 9.4 Critical severity

    talebook: Improper Control of Generation of Code

    CVE-2026-45272PoxenStudio

    MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIAL_AUTH key names without validating quotes or newline characte