CyberSecBulletin

Teableio vulnerabilities

We track 2 vulnerabilities in Teableio products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Teableio vulnerabilities

  • 7.3 High severity

    teable: Improper Neutralization of Input During Web Page Generation

    CVE-2026-127084Teableio

    Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users to upload SVG or HTML attachments with an attacker-chosen content type. Attackers can send the same-origin /api/attachments/read URL, s

  • 8.8 High severity

    teable: Missing Authorization

    CVE-2026-56773Teableio

    Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints l