CVE-2026-32549

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

ThumbPress versions prior to 6.5 contain an unauthenticated Broken Access Control vulnerability. Unauthenticated users can perform operations they are not authorized to do.

Risk Assessment

An attacker can modify settings or data they should not have access to, potentially leading to system integrity issues.

Recommendation

Upgrade ThumbPress to version 6.5 or later.

Original NVD description (English source)

Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.