CVE-2026-40788

HighCVSS 7.1

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

ChatBot versions up to 7.9.7 have a vulnerability in access control that may allow unauthorized subscribers to access resources.

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to loss of confidentiality and integrity of information.

It is recommended to update ChatBot to the latest version to mitigate this access control vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.