Rachid Marcil — Security Researcher

GitHub: https://github.com/gsmarcil — X: https://x.com/Rachidmarcil

My page covers the latest technical developments in vulnerabilities and artificial intelligence.

CVE Credits

Published

• CVE-2026-118984 — OmniRoute, >=3.8.0, <3.8.52 — Unverified Password Change via /api/settings/require-login — Assigned 2026-10-29 — VulnCheck (CNA)
• CVE-2026-116634 — OmniRoute, >=3.8.50, <3.8.52 — Missing Authentication via /api/sync/tokens — Assigned 2026-10-26 — VulnCheck (CNA)

Assigned, record not yet published — details withheld until publication

• CVE-2026-117448 — cJSON, 1.5.0 through 1.7.19 — Assigned 2026-10-28 — MITRE (CNA)
• CVE-2026-39148 — cJSON, up to 1.7.19 — Assigned 2026-10-16 — MITRE (CNA)