SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-16471

HIGH · CVSS 7.5 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-08-17 · Last synced 2026-09-16

CyberRota Analysis

AI-Generated

Dolusoft Software Technologies' Sonlogger versions prior to 6.7.4.8 are vulnerable due to a missing authorization flaw that permits unauthorized access to functionalities not properly constrained by Access Control Lists (ACLs). This vulnerability could lead to significant security breaches, allowing attackers to exploit sensitive features within the application. Organizations using affected versions should prioritize remediation to mitigate potential risks associated with unauthorized access.

CVE
CVE-2026-16471
Severity
HIGH
CVSS
7.5
EPSS
0.23%

Original NVD Description

Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from v6.6.6 before 6.7.4.8.