AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-66678

MEDIUM · CVSS 4.3 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The vulnerability arises from broken access control in the Advanced Custom Fields Font Awesome Field plugin, affecting versions up to 6.1.1. This flaw could allow unauthorized users to access restricted functionalities, potentially leading to data exposure or manipulation. Organizations utilizing this plugin, particularly those managing sensitive data, should prioritize remediation to mitigate potential risks.

CVE
CVE-2026-66678
Severity
MEDIUM
CVSS
4.3
EPSS
0.20%

Original NVD Description

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.