CVE-2026-84062CWE-639

CVE-2026-84062

Medium · published September 10, 2026

CVSS v3.0
4.3
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited, the content of the page may be altered by an attacker who can log in to the product.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00297 · 21.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-09-10T07:17Z
References (2)
https://burger.d-zero.co.jp/blogs/archives/3 · [email protected]https://jvn.jp/en/jp/JVN21088484/ · [email protected]
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 10 SEP 02:15Z
    BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key
    cvelistv5