PT-2026-25284 · Vowelweb · Vw School Education

Nabil Irawan

·

CVE-2026-32438

·

Publicado

2026-03-13

·

Atualizado

2026-03-14

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions vowelweb VW School Education versions through 1.4.6
Description An authorization issue exists in vowelweb VW School Education. The problem stems from incorrectly configured access control security levels, potentially allowing unauthorized access.
Recommendations Versions prior to and including 1.4.6 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-32438

Produtos afetados

Vw School Education