CVE-2026-5228CWE-284CWE-862

Improper Access Control in Kurt Software Studio's WriteUp Mobile App

High · published June 4, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects WriteUp Mobile App: from 1.3.0 through 04062026.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-862 · Missing Authorization
Published
2026-06-04T14:22Z
EPSS history
Timeline
  • 04 JUN 14:22Z
    Improper Access Control in Kurt Software Studio's WriteUp Mobile App
    cvelistv5