Live › vulnerability › CVE-2026-116393
Go to dashboardOptima Express from iHomefinder, Inc has a missing authorization check, so access control levels can be bypassed. An attacker may reach functions or data that their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
Sites or systems running Optima Express through version 9.0.0 are potentially affected, especially where access levels separate user roles. The sources do not say which deployment paths are exposed, so teams using a hosted or differently configured product should confirm with the vendor.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-116393")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.