CVE-2026-54828
HighCVSS 7.5Summary
Motors versions up to 1.4.109 have a vulnerability in access control that allows unauthorized access.
Risk Assessment
Organizations may be exposed to unauthorized user actions, potentially leading to data leaks or unauthorized changes in the system.
Recommendation
It is recommended to upgrade to the latest version of Motors to mitigate this security vulnerability.
Other vulnerabilities in Motors
See all- CVE-2026-66693Medium
Subscriber-level Broken Access Control vulnerability in Motors plugin versions up to and including 1.4.113.
- CVE-2026-27433Medium
The Motors plugin versions up to 5.6.80 contain an unauthenticated broken access control vulnerability. An attacker without authentication can bypass security measures and gain unauthorized access to functions or data.
- CVE-2026-39515Medium
Versions of the engine below 1.4.107 have a broken access control issue for subscribers, which may lead to unauthorized access to resources.
Original NVD description (English source)
Unauthenticated Broken Access Control in Motors <= 1.4.109 versions.