SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-27391

MEDIUM · CVSS 5.4 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

Versions of uListing up to 2.2.0 are susceptible to broken access control vulnerabilities, which could allow unauthorized users to access restricted subscriber functionalities. This flaw could lead to data exposure or manipulation, impacting the integrity of user accounts and sensitive information. Organizations using uListing should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-27391
Severity
MEDIUM
CVSS
5.4
EPSS
0.27%

Original NVD Description

Subscriber Broken Access Control in uListing <= 2.2.0 versions.