CVE-2026-112292Published
CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112292 · Microsoft / collected KEV context
cve-program · CVE-2026-112292
- https://github.com/operacle/checkcle/issues/214
- https://github.com/operacle/checkcle/commit/f2c338ced9162b7820b2495e298d5578df92bf75
- https://github.com/operacle/checkcle/blob/v1.6.0/application/public/upload/data/pb_schema_latest.json
- https://www.vulncheck.com/advisories/checkcle-through-1.6.0-missing-authorization-via-empty-pocketbase-api-rules
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.