CVE-2026-95526

HighCVSS 7.3

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

The BEAR plugin versions up to 1.2.2 contain an unauthenticated Broken Access Control vulnerability. This means an attacker without logging in can gain unauthorized access to functions or data.

Risk Assessment

The risk includes unauthorized access to sensitive functions and data, potentially leading to system integrity compromise or information leakage.

Recommendation

It is recommended to immediately update the BEAR plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in BEAR

CVE-2026-57320High
An unauthenticated Cross Site Scripting (XSS) vulnerability exists in BEAR versions 1.1.8 and earlier. It allows a remote attacker to inject malicious JavaScript code into the page without requiring authentication.

Original NVD description (English source)

Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS