CVE-2026-2697CWE-639

Indirect Object Reference (IDOR) in Security Center

Low · published February 23, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-02-23T15:17Z
EPSS history
Timeline
  • 23 FEB 15:17Z
    Indirect Object Reference (IDOR) in Security Center
    cvelistv5