CVE Catalog
CVE-2026-62038
HighCVSS 7.3Summary
Unauthenticated Broken Authentication in the eRoom plugin up to version 1.7.1. An attacker can bypass authentication mechanisms and gain unauthorized access.
Risk Assessment
Potential for account takeover of administrators or other users, leading to full system compromise.
Recommendation
Update the eRoom plugin to the latest version that includes the security fix.
Other vulnerabilities in eRoom
See all- CVE-2026-25427Medium
The eRoom plugin versions up to 1.7.1 contain a broken access control vulnerability, allowing subscribers unauthorized access to functions reserved for higher roles.
- CVE-2026-25405High
The eRoom plugin version 1.7.1 and earlier contains an SQL Injection vulnerability exploitable by users with Contributor role.
Original NVD description (English source)
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS