Unauthenticated Information Disclosure in Feedbin by Feedbin

CVE-2026-65319

What is CVE-2026-65319?

An unauthenticated information disclosure vulnerability exists in Feedbin, enabling attackers to access private article content without proper authorization. By exploiting this flaw, attackers can send requests to the entries text API endpoint, bypassing crucial authorization filters. This allows them to sequentially manipulate entry IDs via the GET /api/v2/entries/:id/text endpoint, consequently exposing plain-text content from all stored articles, including private newsletters, personal saves, and user-specific private subscriptions.

References