CVE-2026-8233CWE-266CWE-284

Dotouch XproUPF access control

Low · published May 10, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was contacted early about this disclosure.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00201 · 9.5th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-284 · Improper Access Control
Published
2026-05-10T05:30Z
EPSS history
Timeline
  • 10 MAY 05:30Z
    Dotouch XproUPF access control
    cvelistv5