CVE-2026-6355

Description

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration.

PUBLISHED Reserved 2026-04-15 | Published 2026-04-22 | Updated 2026-04-22 | Assigner certcc

Problem types

CWE-284: Improper Access Control

Product status

References

github.com/Penguinsecq/CVE-2026-6355/

cve.org (CVE-2026-6355)

nvd.nist.gov (CVE-2026-6355)

Download JSON