Threats tagged 'ghsa-pmm9-qmcr-8vpp'

CVE-2026-66441 is a high severity vulnerability involving unauthenticated broken access control in MultiVendorX versions up to and including 5.0.10. This flaw allows an attacker without authentication to bypass access restrictions, potentially leading to unauthorized access to sensitive data. The vulnerability has a CVSS score of 7.5, indicating a significant impact on confidentiality. There is no information provided about available patches or fixes for this issue. No known exploits are reported in the wild at this time.