CVE-2026-39637

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The Mogi plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.2.3.

Risk Assessment

Unauthorized users can access administrative functions or sensitive data, potentially leading to confidentiality and integrity breaches.

Recommendation

Immediately update the Mogi plugin to the latest version and review access control settings.

Original NVD description (English source)

Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a through <= 1.2.3.