CVE-2026-40795

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Amelia versions up to 2.2 contain a broken access control vulnerability that may allow unauthorized users to access subscriber resources.

Organizations may be exposed to unauthorized access to subscriber data, potentially leading to information leaks and privacy violations.

It is recommended to upgrade to the latest version of Amelia to mitigate this vulnerability and implement additional access control measures.

Original NVD description (English source)

Subscriber Broken Access Control in Amelia <= 2.2 versions.