CVE-2026-42758
CriticalSummary
CVE-2026-42758 describes an incorrect privilege assignment vulnerability in WebinarIgnition that allows privilege escalation. This issue affects WebinarIgnition from n/a through below 4.08.253.
Risk Assessment
Privilege escalation may lead to unauthorized access to sensitive data and system functions, posing a serious security threat to the organization.
Recommendation
It is recommended to update WebinarIgnition to version 4.08.253 or later to mitigate this vulnerability.
Other vulnerabilities in WebinarIgnition
See all- CVE-2026-42757Critical
CVE-2026-42757 describes an improper limitation of a pathname to a restricted directory, leading to a 'Path Traversal' vulnerability in the WebinarIgnition application. This issue affects versions from n/a to below 4.08.253.
- CVE-2025-60088Medium
Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WebinarIgnition: from n/a through <= 4.06.04.
Original NVD description (English source)
Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a through < 4.08.253.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS