PT-2026-79443 · Comodo · Itop

CVE-2026-27490

·

Published

2026-08-21

·

Updated

2026-08-25

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.2.3
Description Combodo iTop is a web based IT service management tool. Inline images that are accessible without authentication are protected by a weak 24-bit pseudo-random secret, which may allow unauthorized access to these images.
Recommendations Update to version 3.2.3.

Exploit

Fix

Use of Insufficiently Random Values

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-331CWE-330

Related Identifiers

CVE-2026-27490
GHSA-3JR5-RQMX-97GC

Affected Products

Itop