CVE-2026-27999

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Broken Access Control vulnerability in Tourfic up to version 2.23.1 allows a subscriber to gain unauthorized access to administrative functions.

Subscribers may access sensitive functions, potentially leading to data integrity issues or unauthorized changes.

Update Tourfic to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.