OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-66246

HIGH · CVSS 8.8 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The vulnerability in iControl involves broken access controls that may allow attackers to bypass authentication checks or exploit insecure direct object references (IDOR). This could lead to privilege escalation, enabling unauthorized modification or deletion of sensitive application data. Organizations using iControl should prioritize addressing this issue to protect their data integrity and prevent potential breaches.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-66246
Severity
HIGH
CVSS
8.8
EPSS
0.30%

Original NVD Description

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or deletion of sensitive application data.