CVE-2026-7399CWE-639

IDOR in MeWare Software's PDKS

High · published April 30, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

Authorization bypass through User-Controlled key vulnerability in MeWare Software Development Inc. PDKS allows Privilege Abuse.

This issue affects PDKS: from V16.20200313 before VMYR_3.5.2025117.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.4th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-04-30T12:39Z
EPSS history
Timeline
  • 30 APR 12:39Z
    IDOR in MeWare Software's PDKS
    cvelistv5