CVE Catalog
CVE-2026-57324
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.24%
15th percentile — higher than 15% of all known CVEs
Summary
The vulnerability in the GIFT4U plugin versions up to 1.0.10 allows unauthenticated attackers to bypass access controls. This can lead to unauthorized access to functions or data.
Risk Assessment
The risk involves potential unauthorized access to sensitive functions or data without authentication, which may compromise system confidentiality and integrity.
Recommendation
It is recommended to immediately update the GIFT4U plugin to a version newer than 1.0.10 and verify access control configurations.
Original NVD description (English source)
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.