CVE-2024-7956CWE-287
CVE-2024-7956
published September 2, 2026
What it is
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project.
The record
Technical detail
- CVSS
- 7.6 · NONE
- CVSS v4.0
- 7.6 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00265 · 17.4th percentile
- Weakness
- CWE-287 · Improper Authentication
- Published
- 2026-09-02T19:17Z
References (1)
EPSS history
Timeline