Live › vulnerability › CVE-2026-111609
Go to dashboardPKP Open Journal Systems through 3.5.0-5 does not check that a subscription belongs to the requesting journal. A journal or subscription manager can enumerate sequential subscription IDs to view other journals' subscriber details and reassign those subscriptions to their own journal, cutting off the victims' access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Installations hosting several journals on one OJS instance where some users hold journal or subscription manager roles. Single-journal sites where every manager is trusted face less exposure, since the risk is one journal reaching another journal's subscriptions.
No product ranges from the sources yet.
3.5.0-5 are affected.3.5.0-5 to a fixed release (unknown from the sources; check the PKP release notes).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view subscriber details and use updateSubscription to reassign subscriptions to their own journal, revoking victims' access.
This page as .md · .json · in your agent: get_signal("CVE-2026-111609")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.