CVE-2026-39682

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Missing authorization in the linkPizza-Manager plugin (linkpizza-manager) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 5.5.5 inclusive.

Risk Assessment

Unauthorized users may gain access to functions or data that should be protected, potentially leading to confidentiality or integrity breaches.

Recommendation

It is recommended to update the linkPizza-Manager plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in Arjan Pronk linkPizza-Manager linkpizza-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects linkPizza-Manager: from n/a through <= 5.5.5.