SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-59522

MEDIUM · CVSS 6.5 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability in WP ERP versions up to 1.17.5 allows for broken access control, potentially enabling unauthorized users to access sensitive subscriber data. This could lead to data exposure or manipulation, impacting the integrity and confidentiality of user information. Organizations using affected versions of WP ERP should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-59522
Severity
MEDIUM
CVSS
6.5
EPSS
0.32%

Original NVD Description

Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.