PT-2026-23750 · Wikitide Foundation · Tsportal

Pskyechology · Publicado 2026-03-06 · Atualizado 2026-03-27 · CVE-2026-29788

Positive Technologies (AI Summary)

CVSS v4.0

8.4

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H

Name of the Vulnerable Software and Affected Versions TSPortal versions prior to 30

Description TSPortal is a platform used by the WikiTide Foundation’s Trust and Safety team for managing reports, investigations, appeals, and transparency work. Prior to version 30, the conversion of empty strings to null values allowed for the misrepresentation of Data Processing Addendum (DPA) reports as legitimate self-deletion reports.

Recommendations Update to version 30 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-1287

CWE-283

Identificadores relacionados

CVE-2026-29788

GHSA-GFHQ-7499-F3F2

Produtos afetados

Tsportal

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29788.json · Exploit
• https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2 · Aviso do Fabricante
• https://github.com/miraheze/TSPortal · Nota
• https://t.me/cveNotify/155094 · Publicação no Telegram
• https://api.laravel.com/docs/12.x/Illuminate/Foundation/Configuration/Middleware.html#method_convertEmptyStringsToNull · Nota
• https://issue-tracker.miraheze.org/T15053 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-29788 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-gfhq-7499-f3f2 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2030385164057018669 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-29788 · Aviso do Fabricante
• https://t.me/CVEtracker/46641 · Publicação no Telegram