| Summary | Incorrect access control in the /{form}/webhooks/{webhook} endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant's webhook via a crafted request. |
|---|---|
| Publication Date | June 16, 2026, 5:16 a.m. |
| Registration Date | June 17, 2026, 4:13 a.m. |
| Last Update | June 17, 2026, 12:50 a.m. |