CVE-2026-19358
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A weakness was identified in 3CORESec Trapdoor up to version 1.2.2, related to improper access controls in the DefaultFunction. The attack can be initiated remotely. The vendor was contacted about the issue.
Risk Assessment
Improper access controls may allow an attacker to perform unauthorized actions, potentially leading to system security breaches. Lack of information about an available patch increases risk.
Recommendation
Monitor vendor communications and apply the patch as soon as it becomes available. In the meantime, restrict access to vulnerable functions.
Original NVD description (English source)
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.