What is the CVSS score of CVE-2026-24524?

CVE-2026-24524 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Essekia Tablesome are affected by CVE-2026-24524?

A missing authorization vulnerability in Essekia Tablesome versions up to 1.1.35.2 allows attackers to exploit misconfigured access controls to gain unauthorized access to sensitive data and…

How to fix or mitigate CVE-2026-24524?

Within 24 hours: Audit all Tablesome instances to confirm versions and identify which are ≤1.1.35.2; disable or restrict access to the Tablesome plugin if business-critical alternatives exist. Within 7 days: Implement network segmentation and WAF rules to restrict access to Tablesome administrative interfaces; monitor access logs for suspicious authorization bypass attempts. Within 30 days: Contact Essekia for patch availability; plan upgrade testing for 1.1.35.3 or later immediately upon release; consider alternative plugins if patch timeline becomes unacceptable.

Essekia Tablesome CVE-2026-24524

MEDIUM

Missing Authorization (CWE-862)

2026-01-23 audit@patchstack.com

Authentication Bypass

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Severity Changed

Apr 23, 2026 - 15:43 NVD

HIGH MEDIUM

CVSS changed

Apr 23, 2026 - 15:43 NVD

8.1 (HIGH) 4.3 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 23, 2026 - 15:16 nvd

HIGH 8.1

DescriptionCVE.org

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.2.

AnalysisAI

Essekia Tablesome versions up to 1.1.35.2 contain an authorization bypass vulnerability that allows authenticated attackers to access or modify resources they should not have permission to reach due to misconfigured access controls. The vulnerability requires low attack complexity and network access, potentially exposing sensitive data and allowing unauthorized modifications without authentication bypass. A patch is not currently available, leaving affected users vulnerable to exploitation by authenticated users.

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Essekia Tablesome tablesome. Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.2.