MEDIUMCVSS v3.1 4.3Vulnerability
CVE-2026-82014
Any authenticated user, including a Viewer, could change the preferences of any team, such as its home dashboard, theme and timezone, through an undocumented endpoint with no access control, and so redirect every member of that team to a dashboard of their choice (missing authorization).
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 4.3
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 4.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-82014
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- First seen by Signal
- 2026-11-11T15:41:39+00:00
- Name
- CVE-2026-82014
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Published at
- 2026-11-11T15:17:25.020
- Last modified
- 2026-11-11T15:17:25.020
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph