CVE-2026-19358CWE-266CWE-284broken-access-control

CVE-2026-19358

Medium · published August 9, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.1th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-284 · Improper Access Control
Published
2026-08-09T20:16Z
References (4)
https://vuldb.com/cve/CVE-2026-19358 · [email protected]https://vuldb.com/submit/866021 · [email protected]https://vuldb.com/vuln/387212 · [email protected]https://vuldb.com/vuln/387212/cti · [email protected]
EPSS history
Timeline
  • 09 AUG 15:45Z
    3CORESec Trapdoor DefaultFunction access control
    cvelistv5