SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-66442

MEDIUM · CVSS 5.4 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

YayPricing versions up to 3.5.6 are susceptible to broken access control vulnerabilities, allowing unauthorized users to access restricted functionalities or data. This could lead to potential data exposure or manipulation, impacting the integrity of user transactions. Organizations utilizing YayPricing should prioritize remediation to safeguard sensitive information and maintain compliance.

CVE
CVE-2026-66442
Severity
MEDIUM
CVSS
5.4
EPSS
0.22%

Original NVD Description

Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.