PT-2026-88320 · Moltis Org · Moltis

·

CVE-2026-86808

·

Published

2026-09-08

·

Updated

2026-09-08

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 20260819.01 is sufficient to fix this issue. The name of the patch is 3b92dd64d5648f829968cf48bf67dc3113852fef. Upgrading the affected component is advised.

Exploit

Fix

Missing Authentication

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86808

Affected Products

Moltis