CVE-2026-2414CWE-639

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2

Medium · published March 25, 2026

CVSS v4.0
5.6
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
EPSS
0.00302 · 21.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-03-25T17:03Z
EPSS history
Timeline
  • 25 MAR 17:03Z
    Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2
    cvelistv5