CVE-2026-3020

Description

Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validating the new email address, and requesting a new password. This could allow them to take complete control of other users' legitimate accounts

PUBLISHED Reserved 2026-02-23 | Published 2026-03-16 | Updated 2026-03-16 | Assigner INCIBE

Problem types

CWE-639 Authorization bypass through User-Controlled key

Product status

References

www.incibe.es/...iple-vulnerabilities-wakyma-application-web patch

cve.org (CVE-2026-3020)

nvd.nist.gov (CVE-2026-3020)

Download JSON