CVE-2026-27672CWE-862

Missing Authorization check in Material Master Application

Medium · published April 14, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a low impact on confidentiality and does not affect integrity and availability of the system.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-04-14T00:06Z
EPSS history
Timeline
  • 14 APR 00:06Z
    Missing Authorization check in Material Master Application
    cvelistv5