CVE-2026-16309

MediumCVSS 5.3

Published: 18/08/2026(UTC)Updated: 22/10/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows accessing functionality not properly constrained by ACLs. This issue affects EdoWEB before 780-g7.

Risk Assessment

An attacker can gain access to unauthorized functionality, potentially leading to data integrity compromise or unauthorized actions.

Recommendation

Update EdoWEB to version 780-g7 or later, which includes the fix.

Other vulnerabilities in EdoWEB

CVE-2026-16307Medium
EdoWEB contains an authorization bypass through a user-controlled key vulnerability, allowing access to functionality not properly constrained by ACLs. This affects versions before 780-g7.

Original NVD description (English source)

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS