← Back to CVE search

CVE-2026-24586

Newses

Description

Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0.77.

CVSS 5.4EPSS 0.255%Risk 0.55
View source
Published
2026-05-25 22:16:33
Affected versions
<=2.0.0.77
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L