CVE Catalog

CVE-2026-66693

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Subscriber-level Broken Access Control vulnerability in Motors plugin versions up to and including 1.4.113.

Risk Assessment

A subscriber can gain unauthorized access to functionality, potentially leading to data breaches or unauthorized changes.

Recommendation

Update the Motors plugin to a version newer than 1.4.113.

Original NVD description (English source)

Subscriber Broken Access Control in Motors <= 1.4.113 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS