OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-42638

HIGH · CVSS 7.5

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Easy Digital Downloads versions up to 3.7.1 are vulnerable to unauthenticated broken access control, allowing attackers to bypass security measures and gain unauthorized access to restricted resources. This vulnerability poses a significant risk to any organization using these versions, as it could lead to data exposure or manipulation. Organizations utilizing Easy Digital Downloads should prioritize patching or upgrading to mitigate potential exploitation.

CVE
CVE-2026-42638
Severity
HIGH
CVSS
7.5
EPSS
N/A

Original NVD Description

Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.7.1 versions.