Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #9

Medium-severity authorization bypass vulnerability disclosed in Groundhogg HollerBox

Original: 🚨 EUVD-2026-94930 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: HollerBox 🏢 Vendor: Groundhogg 📅 Updated: 2026-10-08 📝 Authoriz

A new vulnerability, EUVD-2026-94930, has been catalogued affecting HollerBox, a plugin by vendor Groundhogg. The flaw is an authorization bypass through a user-controlled key, rated 6.5 out of 10 on the CVSS v3.1 scale, allowing attackers to exploit incorrectly configured access controls. The entry was updated on October 8, 2026, and security teams are likely assessing whether their installations need patching.

Why now: A newly published vulnerability advisory for a widely used plugin prompts administrators to check exposure and patch

HollerBoxGroundhoggEUVD-2026-94930

Open on mastodon →

Evidence

• 🚨 EUVD-2026-94930 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: HollerBox 🏢 Vendor: Groundhogg 📅 Updated: 2026-10-08 📝 Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1492789