PT-2026-23750 · Wikitide Foundation · Tsportal

Pskyechology · Published 2026-03-06 · Updated 2026-03-27 · CVE-2026-29788

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H

Name of the Vulnerable Software and Affected Versions TSPortal versions prior to 30

Description TSPortal is a platform used by the WikiTide Foundation’s Trust and Safety team for managing reports, investigations, appeals, and transparency work. Prior to version 30, the conversion of empty strings to null values allowed for the misrepresentation of Data Processing Addendum (DPA) reports as legitimate self-deletion reports.

Recommendations Update to version 30 or later.

Exploit

Fix

Weakness Enumeration

CWE-1287

CWE-283

Related Identifiers

CVE-2026-29788

GHSA-GFHQ-7499-F3F2

Affected Products

Tsportal

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29788.json · Exploit
• https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-29788 · Security Note
• https://osv.dev/vulnerability/GHSA-gfhq-7499-f3f2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-29788 · Vendor Advisory
• https://github.com/miraheze/TSPortal · Note
• https://t.me/cveNotify/155094 · Telegram Post
• https://api.laravel.com/docs/12.x/Illuminate/Foundation/Configuration/Middleware.html#method_convertEmptyStringsToNull · Note
• https://issue-tracker.miraheze.org/T15053 · Note
• https://twitter.com/CVEnew/status/2030385164057018669 · Twitter Post
• https://t.me/CVEtracker/46641 · Telegram Post