PT-2026-79763

CVE-2026-77116

Published

2026-08-21

Updated

2026-08-23

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brave Popup Builder versions prior to 0.8.6

Description Brave Popup Builder contains a broken access control issue. Any authenticated user, including those with Subscriber or WooCommerce Customer roles, can access and read popup content they are not authorized to view by providing a post ID within the URL.

Recommendations Update Brave Popup Builder to version 0.8.6 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Huseyin Mertoglu

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers