CVE-2026-3322

MediumCVSS 5.6

Published: 26/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

Risk Assessment

An unauthorized user could perform operations reserved for administrators, potentially leading to unauthorized configuration changes or compromise of system integrity.

Recommendation

Update Lobster_pro to version 25.1.3 or later. Until patched, restrict access to the application interface to trusted networks and users only.

Other vulnerabilities in Lobster_pro

CVE-2024-13971High
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS