{"schema":"vulnpedia.research/1","cve":"CVE-2026-111646","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@hieuPenguinnn/surveyking-public-preview-unauth-file-read","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://hackmd.io/@hieuPenguinnn/surveyking-public-preview-unauth-file-read"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://hackmd.io/@hieuPenguinnn/surveyking-public-preview-unauth-file-read"}]},{"url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/api/src/main/java/cn/surveyking/server/api/SurveyApi.java#L99-L107","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/api/src/main/java/cn/surveyking/server/api/SurveyApi.java#L99-L107"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/api/src/main/java/cn/surveyking/server/api/SurveyApi.java#L99-L107"}]},{"url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/rdbms/src/main/java/cn/surveyking/server/impl/FileServiceImpl.java#L197-L228","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/rdbms/src/main/java/cn/surveyking/server/impl/FileServiceImpl.java#L197-L228"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/rdbms/src/main/java/cn/surveyking/server/impl/FileServiceImpl.java#L197-L228"}]},{"url":"https://github.com/javahuang/SurveyKing/commit/9489171d53e55ace2856a91af38034665c0064a4","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://github.com/javahuang/SurveyKing/commit/9489171d53e55ace2856a91af38034665c0064a4"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://github.com/javahuang/SurveyKing/commit/9489171d53e55ace2856a91af38034665c0064a4"}]},{"url":"https://github.com/javahuang/SurveyKing","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://github.com/javahuang/SurveyKing"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://github.com/javahuang/SurveyKing"}]},{"url":"https://www.vulncheck.com/advisories/surveyking-before-1.13.0-unauthenticated-file-download-via-api-public-preview","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:39:15.125Z","url":"https://www.vulncheck.com/advisories/surveyking-before-1.13.0-unauthenticated-file-download-via-api-public-preview"},{"source":"nvd","sourceId":"CVE-2026-111646","modified":"2026-10-16T22:17:21.607","url":"https://www.vulncheck.com/advisories/surveyking-before-1.13.0-unauthenticated-file-download-via-api-public-preview"}]},{"source":"euvd","sourceId":"EUVD-2026-103068","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103068","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-103068","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103068"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}