Security Advisory

CVE-2026-52466

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-05 00:00:00

Last updated 2026-08-06 12:21:02

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\AbstractBase::validateAccessPermission after it has found that controller level access permissions do not allow access to the requested function. The requester receives a response indicating that access was denied, but the actual function is executed regardless of that.

← Browse all CVEs View on cve.org ↗