PT-2026-4413 · Unknown · Box Now Delivery

Nabil Irawan

·

CVE-2026-24571

·

Publicado

2026-01-23

·

Atualizado

2026-01-24

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions boxnow BOX NOW Delivery versions n/a through 3.0.2
Description An authorization issue exists in boxnow BOX NOW Delivery. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.
Recommendations Update to a version later than 3.0.2.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-24571

Produtos afetados

Box Now Delivery