CVE WATCH / VULNERABILITY DETAIL
CVE-2026-125362
LOWCVSS 3.1NVD feed
Published 10 November 2026 · tracked since 10 November 2026
Description
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python's non-cryptographic random.choices(). Authenticated users permitted to create share links can request many generated passwords via the multi-share-lin
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124604 MEDIUM 6.2
- CVE-2026-124603 MEDIUM 6.2
- CVE-2026-124602 MEDIUM 6.2
- CVE-2026-124601 MEDIUM 6.2
- CVE-2026-124599 MEDIUM 6.2
- CVE-2026-124598 HIGH 7.5
- CVE-2026-109810 MEDIUM 6.1
- CVE-2026-109799 HIGH 7.5
- CVE-2026-109797 HIGH 7.1
- CVE-2026-107244 HIGH 7.6