CVE-2026-92567Published
TDuck survey form through 5.0 Unauthorized Data Modification
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-92567 · Microsoft / collected KEV context
cve-program · CVE-2026-92567
- https://github.com/TDuckCloud/tduck-survey-form/issues/39
- https://github.com/TDuckCloud/tduck-survey-form
- https://github.com/TDuckCloud/tduck-survey-form/blob/9ad4e2dc75cdff5eacc8be0c73f0d4db3c265d43/tduck-api/src/main/java/com/tduck/cloud/api/web/controller/UserFormResultController.java#L198-L207
- https://github.com/TDuckCloud/tduck-survey-form/blob/9ad4e2dc75cdff5eacc8be0c73f0d4db3c265d43/tduck-form/src/main/java/com/tduck/cloud/form/service/impl/UserFormDataServiceImpl.java#L158-L167
- https://www.vulncheck.com/advisories/tduck-survey-form-through-5.0-unauthorized-data-modification
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.