CVE-2026-16307

MediumCVSS 4.3

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Summary

EdoWEB contains an authorization bypass through a user-controlled key vulnerability, allowing access to functionality not properly constrained by ACLs. This affects versions before 780-g7.

Risk Assessment

An attacker could access functionality they should not be permitted to use, potentially compromising data confidentiality and integrity.

Recommendation

Update EdoWEB to version 780-g7 or later.

Other vulnerabilities in EdoWEB

CVE-2026-16309Medium
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows accessing functionality not properly constrained by ACLs. This issue affects EdoWEB before 780-g7.

Original NVD description (English source)

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS