What is the CVSS score of CVE-2023-26468?

CVE-2023-26468 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.6%.

Is there a patch available for CVE-2023-26468?

Yes, a patch is available for CVE-2023-26468. Update the affected software to the latest version immediately.

Cerebrate CVE-2023-26468

CRITICAL

2023-02-24 cve@mitre.org

Information Disclosure Cerebrate

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Feb 24, 2023 - 00:15 nvd

CRITICAL 9.1

DescriptionNVD

Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.

AnalysisAI

Cerebrate 1.12 does not properly consider organisation_id during creation of API keys. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Cerebrate 1.12 does not properly consider organisation_id during creation of API keys. Affected products include: Cerebrate-Project Cerebrate.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cerebrate

View all

CVE-2022-25321 MEDIUM This Month POC

6.1 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo

CVE-2023-28883 CRITICAL Act Now

9.8 Mar 27

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint. Rated critical severity (CVSS 9.8), this

CVE-2022-25319 MEDIUM This Month POC

5.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely explo

CVE-2026-53901 HIGH This Week

8.7 Jun 11

Mass-assignment in Cerebrate before v1.37 lets remote attackers reaching a generic CRUD add endpoint supply a client-con

CVE-2026-53911 MEDIUM This Month

6.3 Jun 11

Unauthorized record modification in Cerebrate before 1.37 allows any authenticated user to overwrite arbitrary records o

CVE-2022-25317 MEDIUM This Month

6.1 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo

CVE-2023-41908 MEDIUM This Month

5.3 Sep 05

Cerebrate before 1.15 lacks the Secure attribute for the session cookie. Rated medium severity (CVSS 5.3), this vulnerab

CVE-2022-25320 MEDIUM This Month

5.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely explo

CVE-2026-53912 MEDIUM This Month

5.1 Jun 11

Cerebrate's inbox self-registration workflow exposed bcrypt password hashes of pending registrants to any authenticated

CVE-2023-41363 MEDIUM This Month

4.3 Aug 29

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other

CVE-2022-25318 MEDIUM This Month

4.3 Feb 18

An issue was discovered in Cerebrate through 1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely explo

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2023-26468 vulnerability details – vuln.today

Back

Cerebrate CVE-2023-26468

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Cerebrate

Same technique Information Disclosure

Share

External POC / Exploit Code