CVE-2026-84062

MediumCVSS 4.3

Published: 10/09/2026(UTC)Updated: 01/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

20th percentile - higher than 20% of all known CVEs

Summary

BurgerEditor versions 3.0.0 through 3.4.0 contain an authorization bypass issue through a user-controlled key. If exploited, an attacker who can log in to the product may alter page content.

Risk Assessment

Risk of unauthorized modification of page content by an authenticated attacker, potentially leading to data integrity and trust issues.

Recommendation

Immediately update BurgerEditor to the latest patched version and review logs for unauthorized content changes.

Other vulnerabilities in BurgerEditor

CVE-2026-84063Medium
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of files with dangerous types. If exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code execution.

Original NVD description (English source)

BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS