CVE-2026-27535

HighCVSS 7.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

The Solace Extra plugin versions up to 1.6.0 have a broken access control vulnerability affecting subscribers. This means a low-privileged user may gain unauthorized access to certain functions or data.

Risk Assessment

Risk of unauthorized access to sensitive functions or data, potentially leading to confidentiality or integrity breaches.

Recommendation

Update the Solace Extra plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.