CVE-2026-111358Published
SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-111358 · Microsoft / collected KEV context
cve-program · CVE-2026-111358
- https://hackmd.io/@hieuPenguinnn/sendportal-subscriber-tags-cross-workspace-attach
- https://github.com/mettle/sendportal-core/blob/v4.0.1/src/Repositories/Subscribers/BaseSubscriberTenantRepository.php#L48-L51
- https://github.com/mettle/sendportal-core/blob/v4.0.1/src/Http/Requests/SubscriberRequest.php#L34-L37
- https://github.com/mettle/sendportal-core
- https://www.vulncheck.com/advisories/sendportal-sendportal-core-through-4.0.1-cross-workspace-tag-attachment-via-subscriber-form
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.