linqi Comment API IDOR Vulnerability Advisory (CVE-2026-11369)

Vulnerability Overview Vulnerability Name: Insecure Direct Object Reference (IDOR) in Comment API in linqi Vulnerability ID: SEC-2026-004 CVE-ID: CVE-2026-11369 Vulnerability Type: Insecure Direct Object Reference / Missing Authorization (CVE-639, CWE-862) Severity: High CVSS Base Score: 7.1 Publication Date: June 05, 2026 Status: Resolved Affected Scope Affected Product: linqi Affected Versions: All versions prior to 1.4.8.6 Remediation Remediation Measure: Install the security update for linqi. Recommendation: Install the listed security updates on your systems promptly. Additional Information Report a Vulnerability: To report a vulnerability, please review the Vulnerability Disclosure Policy. Page Content Page Title: Security Advisories Page Description: Provides detailed information about identified and resolved security vulnerabilities (CVEs), shares technical details, and provides corresponding patches. Navigation Bar and Footer Navigation Bar: Contains options such as Glossary, General, Process design, Form design, Dashboard design, Document templates, Master data, External systems, Administration, OnPremise, Security, Vulnerability Disclosure Policy, and Security Advisories. Footer: Contains options such as English and Search. Summary This page primarily introduces a security vulnerability in the linqi software, specifically an Insecure Direct Object Reference (IDOR) issue in the Comment API. The vulnerability is rated as High severity with a CVSS base score of 7.1 and affects all versions prior to 1.4.8.6. Users are advised to install the security updates promptly to remediate this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

linqi Comment API IDOR Vulnerability Advisory (CVE-2026-11369)