CVE-2026-28155

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

Unauthenticated Insecure Direct Object References (IDOR) vulnerability in Do Lasso up to version 358 allows an unauthenticated attacker to access objects without authorization.

Risk Assessment

Unauthenticated attackers may access sensitive data or functions, potentially leading to confidentiality breaches.

Recommendation

Update Do Lasso to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.