September 15, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-66887NVD

Vulnerability Summary

The affected products are missing authorization on state-changing CGIs and session checks are not performed.
Severity Level
CRITICAL(9.6)
Published Date
Sep 15, 2026
Last Modified
Sep 15, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics
Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References