Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
Hiperdino REST API v1.0 CRITICAL vuln (CVE-2026-12258): Static bearer token lets attackers enumerate customer contact details. No patch — restrict token use, monitor access now. https://radar.offseq.com/threat/cve-2026-12258-cwe-284-improper-access-control-in-hiperdino-rest-api-827f2edf6294f9bd #...
2026-09-14T13:30:28.357Z