CVE-2026-91830: Subscribe to Comments 0 to before 2.3.3

Affected technology

Subscribe to Comments · 0 to before 2.3.3
Vendor not specified by the source

Description’s affected range: before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can disclose a subscriber's management key and silently alter that subscriber's subscriptions.