---
id: "CVE-2026-116384"
kind: "vulnerability"
aliases: ["CVE-2026-116384"]
title: "Bdtask Garage 24 Garage Management Software: backend flaw allows improper authorization remotely"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["bdtask", "garage-management", "other", "web-app"]
not_affected_if: []
published_at: "2026-10-26T17:17:26+00:00"
first_seen_at: "2026-10-26T17:31:22+00:00"
updated_at: "2026-10-26T17:33:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116384", "first_seen_at": "2026-10-26T17:31:22+00:00"}]
---

# Bdtask Garage 24 Garage Management Software: backend flaw allows improper authorization remotely

Bdtask Garage 24 Garage Management Software 1.0 has a weakness in its backend code that lets a remote user get around authorization checks. A public exploit exists, and the vendor did not respond to disclosure.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-26T17:31:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116384

## From the sources

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_