CVE-2026-6355

EPSS 0.21%
Veröffentlicht 22.04.2026 13:18:05
Zuletzt bearbeitet 12.05.2026 20:17:24
Quelle cret@cert.org
CVE-Watchlists
Login
Unerledigt
Login

CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Augmentt ≫ Augmentt Version < 2025-10-02

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.114

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-639 Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

https://github.com/Penguinsecq/CVE-2026-6355/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-6355

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-6355

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-6355

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-6355