PT-2026-133595

CVE-2026-119665

·

Published

2026-10-30

·

Updated

2026-10-30

Description by

CVSS 3.1
6.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set project pk to another project's sequential ID to modify, delete, or trigger scheduled tasks via run-now and read execution logs.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-119665
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com