CVE-2026-66441

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

Unauthenticated Broken Access Control vulnerability in MultiVendorX versions up to 5.0.10.

Risk Assessment

An unauthenticated attacker may gain unauthorized access to administrative functions, potentially leading to data integrity and confidentiality breaches.

Recommendation

Update the plugin to the latest available version that includes the security fix.

Original NVD description (English source)

Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.