IDOR

Everything Firewall Chronicle has reported about IDOR: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Coze Studio IDOR CVE-2026-77935 Enables Cross-Tenant Workflow Manipulation Up to v0.5.1

An insecure direct object reference in Coze Studio through 0.5.1 allows authenticated users to access and manipulate workflows belonging to other tenants.

Oct 20, 2026

Vulnerabilities

Insecure Direct Object References: How Hidden IDs Leak Data

Insecure direct object references expose data when applications trust user-supplied identifiers without verifying ownership or access rights.

Oct 13, 2026