Live › vulnerability › CVE-2026-3322
Go to dashboardLobster_pro does not check permissions on some endpoints that should be restricted to administrators. An attacker who can reach those endpoints can perform administrative actions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:02 UTC. All times on this page are UTC.
Teams running Lobster_pro version or other versions before are affected. The sources do not say which deployment setups or network exposure make the endpoints reachable, so unknown.
4.12.12-LTS25.1.3No product ranges from the sources yet.
25.1.325.1.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-3322")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.