CVE Catalog
CVE-2026-16309
MediumCVSS 5.3Summary
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows accessing functionality not properly constrained by ACLs. This issue affects EdoWEB before 780-g7.
Risk Assessment
An attacker can gain access to unauthorized functionality, potentially leading to data integrity compromise or unauthorized actions.
Recommendation
Update EdoWEB to version 780-g7 or later, which includes the fix.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.