CVE Catalog
CVE-2026-36453
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.
Risk Assessment
An attacker could access files they are not authorized to, potentially leading to data leakage or exposure of sensitive information.
Recommendation
Update Rhymix to version 2.1.31 or later to eliminate the vulnerability.
Other vulnerabilities in Rhymix
Original NVD description (English source)
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS