Description

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07.

Related CPE's

Could not find any relations

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1272

Weaknesses

[email protected]

Secondary
CWE-639

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-08T12:17:17.500Z

20 hours ago

Last modified

2026-10-08T20:09:14.010Z

13 hours ago