CVE-2026-28190

HighCVSS 7.1

Published: 24/08/2026(UTC)Updated: 24/08/2026(UTC)Translated: 24/08/2026(UTC)NVD NIST

Summary

Broken Access Control vulnerability in ProLancer Element versions up to 1.4.8, exploitable by a user with Subscriber role.

Risk Assessment

An attacker with a subscriber account can access functions or data they should not have permissions for, potentially leading to privilege escalation or data leakage.

Recommendation

Update ProLancer Element to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in ProLancer Element

CVE-2026-32471High
SQL Injection vulnerability in ProLancer Element versions up to 1.4.8, exploitable by a user with Subscriber role.

Original NVD description (English source)

Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.