What is the CVSS score of CVE-2026-32421?

CVE-2026-32421 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Post Timeline are affected by CVE-2026-32421?

Organizations using Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline should be aware of moderate risk from CVE-2026-32421, a missing authorization vulnerability rated…

How to fix or mitigate CVE-2026-32421?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Post Timeline CVE-2026-32421

EUVD-2026-11947 MEDIUM

Missing Authorization (CWE-862)

2026-03-13 Patchstack

WordPress Authentication Bypass Post Timeline Wordpress Plugin

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 16:57 euvd

EUVD-2026-11947

Analysis Generated

Mar 13, 2026 - 16:57 vuln.today

CVE Published

Mar 13, 2026 - 11:42 nvd

MEDIUM 5.3

DescriptionCVE.org

Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through <= 2.4.1.

AnalysisAI

Post Timeline versions 2.4.1 and earlier contain a missing authorization flaw that allows unauthenticated remote attackers to modify data by exploiting improperly configured access controls. The vulnerability enables integrity compromise without requiring user interaction or special privileges. No patch is currently available for this issue.

Technical ContextAI

The vulnerability resides in the Agile Logix Post Timeline application, a web-based timeline management tool. The root cause is classified under CWE-862 (Missing Authorization), which describes a failure to properly enforce access control policies at the application logic layer. Rather than a cryptographic or protocol-level flaw, this is a business logic vulnerability where the application fails to verify that the authenticated user (or unauthenticated requester) has permission to perform specific actions on protected resources. The affected product is identified via CPE as the Agile Logix Post Timeline component, with vulnerability present in versions up to and including 2.4.1. The issue manifests in how the application handles access control security level configurations, likely failing to validate authorization tokens, role-based access control (RBAC) rules, or attribute-based access control (ABAC) policies before processing state-modifying requests.

RemediationAI

Immediately upgrade Agile Logix Post Timeline to version 2.4.2 or later, which should include authorization control fixes. Until patching is feasible, implement compensating controls: restrict network access to Post Timeline instances using firewall rules or security groups to allow only trusted internal IP ranges, enforce authentication at a reverse proxy layer with mutual TLS or API gateway authentication before requests reach the application, disable or revoke any API tokens or service accounts that interact with Post Timeline, and audit access logs for unauthorized modification attempts. If the application supports role-based access control configuration, review and enforce the principle of least privilege on all user accounts. Contact Agile Logix support for patch availability and timeline if a vendor advisory has not been published.