CVE-2026-50541 — Xibo: IDOR (Broken Object-Level Authorization) in GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export

According to the CERT title, an IDOR, or broken object-level authorization, vulnerability in Xibo's GET /dataset/export/csv/{id} endpoint allows arbitrary dataset export.