CVE-2026-3739
suitenumerique messages ThreadAccess serializers.py ThreadAccessSerializer improper authentication
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file src/backend/core/api/serializers.py of the component ThreadAccess. The manipulation results in improper authentication. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.3.0 is capable of addressing this issue. The patch is identified as d7729f4b885449f6dee3faf8b5f2a05769fb3d6e. The affected component should be upgraded.
| CWE | CWE-287 |
| Vendor | suitenumerique |
| Product | messages |
| Published | Mar 8, 2026 |
| Last Updated | Mar 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for suitenumerique messages
Be the first to know when new medium vulnerabilities affecting suitenumerique messages are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
suitenumerique / messages
0.2.0
References
vuldb.com: https://vuldb.com/?id.349717 vuldb.com: https://vuldb.com/?ctiid.349717 vuldb.com: https://vuldb.com/?submit.767329 github.com: https://github.com/suitenumerique/messages/security/advisories/GHSA-7476-6crq-4cw9 github.com: https://github.com/suitenumerique/messages/pull/557 github.com: https://github.com/suitenumerique/messages/commit/d7729f4b885449f6dee3faf8b5f2a05769fb3d6e github.com: https://github.com/suitenumerique/messages/releases/tag/v0.3.0 github.com: https://github.com/suitenumerique/messages/
Credits
🔍 djnn (VulDB User)