OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-100514

HIGH · CVSS 7.5 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The vulnerability involves unauthenticated insecure direct object references (IDOR) in the REST API of Log versions up to 1.7.2, allowing attackers to access sensitive data or perform unauthorized actions. This high-severity flaw poses a significant risk to any organization using the affected versions, as it could lead to data breaches or system compromise. Organizations utilizing these versions should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-100514
Severity
HIGH
CVSS
7.5
EPSS
0.29%

Original NVD Description

Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions.