CVE-2026-42731
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
CVE-2026-42731 describes an incorrect privilege assignment vulnerability in miniOrange OTP Verification that allows privilege escalation. This issue affects versions from n/a through 5.4.9 inclusive.
Risk Assessment
Privilege escalation may lead to unauthorized access to sensitive data or system functions, posing a significant security risk to the organization.
Recommendation
It is recommended to update miniOrange OTP Verification to the latest version to mitigate this vulnerability.
Other vulnerabilities in miniOrange OTP Verification
See all- CVE-2026-106610Critical
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation. This issue affects miniorange otp verification: from n/a through 5.5.7.
- CVE-2026-61967Critical
Unauthenticated Privilege Escalation vulnerability in miniorange otp verification versions up to 5.5.1. An attacker can gain higher privileges without authentication.
- CVE-2026-61957High
XSS vulnerability in miniorange otp verification up to version 5.5.1. An unauthenticated attacker can inject malicious JavaScript.
Original NVD description (English source)
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through <= 5.4.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS