CVE Catalog

CVE-2026-16471

HighCVSS 7.5
Published: Translated: NVD NIST

Summary

Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows accessing functionality not properly constrained by ACLs. This issue affects Sonlogger from v6.6.6 before 6.7.4.8.

Risk Assessment

An unauthorized party may gain access to administrative functions or sensitive data, potentially leading to confidentiality and integrity breaches.

Recommendation

Immediately update Sonlogger to version 6.7.4.8 or later and review permission configurations.

Original NVD description (English source)

Missing Authorization vulnerability in Dolusoft Software Technologies Sonlogger allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sonlogger: from v6.6.6 before 6.7.4.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS