EUVD-2026-76743
GHSA-47x5-rf97-8ggr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable with low-privilege authentication required; confidentiality-only impact to unregistered handler data, no integrity or availability effect per description.
Primary rating from Vendor (hq).
CVSS VectorVendor: hq
Lifecycle Timeline
2DescriptionCVE.org
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user regardless of their assigned role, and any newly added handler is fail-open by default until explicitly added to the table.
AnalysisAI
Incorrect authorization in this ICS inventory management component defaults to granting access when a request handler is absent from the role-requirements lookup table, violating deny-by-default principles. Any authenticated user - regardless of assigned role - can reach handlers not explicitly enrolled in the table, and every newly added handler is exposed to all authenticated users until a developer manually registers it. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid authenticated session with any assigned role (PR:L per CVSS 4.0); unauthenticated access is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 5.3 (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N) correctly reflects a medium-severity, confidentiality-bounded impact under current conditions, but the structural risk exceeds what any static point-in-time score can capture: because the fail-open default is architectural, every future code change that introduces a new handler without explicit table enrollment silently expands the attack surface - even a mid-sized municipal IT team in tczew deploying this platform should treat remediation as an architectural priority rather than a routine patch cycle. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult ICS-CERT advisory icsa-26-254-01 (https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json) for vendor-issued patch details; a specific fixed version was not confirmed from available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-863 – Incorrect Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today