AUGUST 26, 2026
Live Feed
Back to database
Case File

CVE-2026-57920

HIGH · CVSS 7.7 EPSS 0.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-26 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.7. See the original NVD description below for full technical details.

CVE
CVE-2026-57920
Severity
HIGH
CVSS
7.7
EPSS
0.26%

Original NVD Description

Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2023-45744 HIGH CVE-2023-45209 MEDIUM CVE-2023-43491 MEDIUM CVE-2023-40146 MEDIUM CVE-2023-39367 CRITICAL CVE-2023-49230 HIGH