What is the CVSS score of CVE-2026-22481?

CVE-2026-22481 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Rasedul Haque Rumi BD Courier Order Ratio Checker are affected by CVE-2026-22481?

A critical authorization flaw in the BD Courier Order Ratio Checker application exposes order data to unauthorized access, affecting any organization using this system to manage courier operations.

How to fix or mitigate CVE-2026-22481?

Within 24 hours: Audit access logs for unauthorized API calls and inventory all systems running this application. Within 7 days: Implement network segmentation to restrict access to the affected application and enable detailed logging. Within 30 days: Contact the vendor for availability of patches, migrate to an alternative solution if available, or maintain compensating controls until a patch is released.

Rasedul Haque Rumi BD Courier Order Ratio Checker CVE-2026-22481

MEDIUM

Missing Authorization (CWE-862)

2026-01-22 audit@patchstack.com

Authentication Bypass

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Severity Changed

Apr 23, 2026 - 15:43 NVD

HIGH MEDIUM

CVSS changed

Apr 23, 2026 - 15:43 NVD

8.8 (HIGH) 4.3 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 8.8

DescriptionCVE.org

Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through <= 2.0.1.

AnalysisAI

Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker is affected by missing authorization (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-862: Missing Authorization) affects Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker. Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through <= 2.0.1.