Live › vulnerability › CVE-2026-112068
Go to dashboardThe backend module does not verify that a backend user has access to the requested site. A user who can open that module can therefore view the analytics dashboard of any site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running the affected backend module with multiple sites or users who should have different site access. Installations with a single site or only fully trusted backend users are less exposed. The sources do not name the product or versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.
This page as .md · .json · in your agent: get_signal("CVE-2026-112068")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.