EUVD-2026-54929
GHSA-7q92-f96q-28wx
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible endpoint requires low-privilege account (PR:L); uniform low CIA impacts reflect partial access bypass with no scope change to downstream systems.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
1DescriptionCVE.org
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.
AnalysisAI
Improper access control in 3CORESec Trapdoor versions up to and including 1.2.2 allows remote low-privileged attackers to bypass authorization logic via the DefaultFunction handler, yielding limited but real confidentiality, integrity, and availability impacts on the vulnerable system. The 'Authentication Bypass' tag and CWE-284 classification together indicate that the DefaultFunction fails to enforce expected access restrictions, a particularly concerning pattern for a product category whose core purpose is access gating. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis; the CVSS 4.0 score of 5.3 (Medium) reflects low-tier CIA impacts constrained to the vulnerable system itself with no lateral scope change.
Technical ContextAI
3CORESec Trapdoor (CPE: cpe:2.3:a:3coresec:trapdoor:*:*:*:*:*:*:*:*) is a security product developed by 3CORESec. The vulnerability is rooted in CWE-284 (Improper Access Control), a root-cause class that covers failures to restrict or correctly enforce access to resources from unauthorized or under-privileged actors. The specific locus is the DefaultFunction, which appears to be responsible for routing or gating access decisions within the application; manipulation of inputs to or invocation of this function circumvents the intended authorization boundary. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms network reachability with low attack complexity and no special timing or configuration prerequisites beyond possessing a low-privileged account. The 'Authentication Bypass' tag corroborates that the DefaultFunction holds access-decision logic that can be subverted rather than simply missing a check.
RemediationAI
No vendor-released patch with a confirmed fixed version number has been identified in the available intelligence at time of analysis. The vendor was contacted prior to public disclosure, indicating coordinated disclosure is underway, but no patched release has been confirmed through the VulDB advisory at https://vuldb.com/vuln/387212 or a vendor security bulletin. Organizations running 3CORESec Trapdoor 1.2.2 or earlier should monitor the VulDB advisory page and the 3CORESec vendor channel for patch availability. As a compensating control, restrict network access to the Trapdoor service to explicitly trusted, authenticated network segments only, reducing the pool of principals who can reach the DefaultFunction endpoint - note this may interrupt legitimate remote workflows that depend on broader network exposure. Additionally, review and tighten the privilege assignments of accounts that can reach the Trapdoor service, minimizing the number of low-privileged accounts with network access to the affected function.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today