CVE-2026-86810 | CyberRota

CyberRota Analysis

AI-Generated

Open-Web-Analytics versions up to 1.9.1 are vulnerable due to improper authentication in the checkCapabilityAndAuthenticateUser function within Core/Controller.php, allowing remote attackers to exploit this flaw. Organizations using this software should prioritize upgrading to version 1.10.0 to mitigate the risk of unauthorized access. Immediate action is recommended to protect sensitive data and maintain system integrity.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-86810

Severity

HIGH

CVSS

7.3

EPSS

0.66%

Original NVD Description

A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely. Upgrading to version 1.10.0 is sufficient to resolve this issue. The patch is named 6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24. It is advisable to upgrade the affected component.