Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. (CVE-2026-66441)
CVE-2026-66441 is a high severity vulnerability involving unauthenticated broken access control in MultiVendorX versions up to and including 5.0.10. This flaw allows an attacker without authentication to bypass access restrictions, potentially leading to unauthorized access to sensitive data. The vulnerability has a CVSS score of 7.5, indicating a significant impact on confidentiality. There is no information provided about available patches or fixes for this issue. No known exploits are reported in the wild at this time.
AI Analysis
Technical Summary
CVE-2026-66441 describes an unauthenticated broken access control vulnerability affecting MultiVendorX software versions up to 5.0.10. The vulnerability allows attackers to bypass access controls without any authentication, resulting in high confidentiality impact. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability allows unauthenticated attackers to bypass access controls, potentially exposing sensitive information. The impact is limited to confidentiality, with no integrity or availability effects reported. This could lead to unauthorized data disclosure in affected MultiVendorX deployments.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected MultiVendorX service to trusted users only.
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. (CVE-2026-66441)
Description
CVE-2026-66441 is a high severity vulnerability involving unauthenticated broken access control in MultiVendorX versions up to and including 5.0.10. This flaw allows an attacker without authentication to bypass access restrictions, potentially leading to unauthorized access to sensitive data. The vulnerability has a CVSS score of 7.5, indicating a significant impact on confidentiality. There is no information provided about available patches or fixes for this issue. No known exploits are reported in the wild at this time.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-66441 describes an unauthenticated broken access control vulnerability affecting MultiVendorX software versions up to 5.0.10. The vulnerability allows attackers to bypass access controls without any authentication, resulting in high confidentiality impact. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability allows unauthenticated attackers to bypass access controls, potentially exposing sensitive information. The impact is limited to confidentiality, with no integrity or availability effects reported. This could lead to unauthorized data disclosure in affected MultiVendorX deployments.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected MultiVendorX service to trusted users only.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pmm9-qmcr-8vpp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-66441"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a7e0358bf8831d5398f7c86
Added to database: 08/13/2026, 17:48:08 UTC
Last enriched: 08/13/2026, 17:55:57 UTC
Last updated: 09/28/2026, 13:47:47 UTC
Views: 24
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.