CVE-2026-100306— TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement
Quick assessment
Affected
TDuckCloud tduck-survey-form
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TDuck 调查表单在 6.0 及以下版本中，未对提交端点正确验证写操作密码，仅在前端进行校验。远程未认证的攻击者可以利用分享链接中的表单密钥，直接向公开的提交 API 提交表单条目，而无需提供密码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100306
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement
Source: CVE Program / CVE List V5
Vulnerability Description
TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote unauthenticated attackers can submit form entries directly to public submission APIs without providing the password by using the form key from share links.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端安全的客户端实施
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TDuckCloud | tduck-survey-form | 0 ~ 6.0 | - |
|
II. Public POCs for CVE-2026-100306
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100306
请登录查看更多情报信息。
Other References for CVE-2026-100306 (2)
Other References for CVE-2026-100306 (3)
Same Patch Batch · TDuckCloud · 2026-09-25 · 4 CVEs total
| CVE-2026-100303 | 5.4 MEDIUM | TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints |
| CVE-2026-100304 | 5.3 MEDIUM | TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check |
| CVE-2026-100305 | 4.3 MEDIUM | TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endp |
IV. Related Vulnerabilities
Same product: tduck-survey-form
-
CVE-2026-100305
TDuck survey form through 6.0 Fill-In Restriction Bypass via -
CVE-2026-100304
TDuck survey form 6.0 Information Disclosure via Fail-Open F -
CVE-2026-100303
TDuck survey form through 6.0 Missing Authorization in Form -
CVE-2026-92602
TDuck survey form through 5.3 Server-Side Request Forgery vi -
CVE-2026-92567
TDuck survey form through 5.0 Unauthorized Data Modification
Same vendor: TDuckCloud
-
CVE-2026-100305
TDuck survey form through 6.0 Fill-In Restriction Bypass via -
CVE-2026-100304
TDuck survey form 6.0 Information Disclosure via Fail-Open F -
CVE-2026-100303
TDuck survey form through 6.0 Missing Authorization in Form -
CVE-2026-95829
TDuckCloud tduck-platform Pagination Inner Interceptor Mybat -
CVE-2026-92602
TDuck survey form through 5.3 Server-Side Request Forgery vi
Same weakness: CWE-602
-
CVE-2026-89175
Kingdom Communication Associated｜Smart Video Intercom System -
CVE-2026-84841
tsi-coop tsi-dpdp-cms client-side enforcement of server-side -
CVE-2026-84110
Releasit Releasit COD Form & Upsells OTP Validation client-s -
CVE-2026-73267
Clusterclaims-controller: managedcluster deletion keyed sole -
CVE-2026-77026
Joomla Extension - tassos.gr - Client-controlled validation
V. Comments for CVE-2026-100306
No comments yet