CVE-2026-82323

HighCVSS 8.1

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Summary

Authorization bypass through User-Controlled key vulnerability in Enocta Platform by Enocta Educational Technologies Inc. Allows exploitation of trusted identifiers. The issue affects versions through 2026-09-28.

Risk Assessment

An attacker can bypass authorization mechanisms, gaining access to resources or functions they should not have permissions for, potentially leading to confidentiality and integrity breaches.

Recommendation

It is recommended to update the Enocta Platform to a version later than 2026-09-28, which includes a fix for this vulnerability.

Other vulnerabilities in Enocta Platform

CVE-2026-82326Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform through 2026-09-28.

Original NVD description (English source)

Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS