CVE-2026-1436 — Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An authenticated user can access other user's profiles without proper authoriz — CVE Database · The Intelligence Room