CVE-2026-116401

HighCVSS 7.5

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

The HUSKY plugin in versions up to 1.4.6 contains an unauthenticated Broken Access Control vulnerability. An attacker can bypass access control mechanisms and perform unauthorized actions.

Risk Assessment

This may allow access to protected resources or administrative functions, leading to a breach of data confidentiality or integrity.

Recommendation

Update the HUSKY plugin to the latest version (above 1.4.6). If no update is available, consider disabling the plugin.

Other vulnerabilities in HUSKY

See all

CVE-2026-115947Medium
Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.
CVE-2026-95608High
Reflected XSS vulnerability in the HUSKY plugin. Affects versions from n/a through 1.4.3.2.

Original NVD description (English source)

Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS