Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://vufind.org/wiki/security:cve-2026-52466 |
|
Thu, 06 Aug 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-863 | |
| Metrics |
cvssV3_1
|
Thu, 06 Aug 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Function Execution in VuFind Due to Access Control Flaw | |
| Weaknesses | CWE-284 |
Wed, 05 Aug 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\AbstractBase::validateAccessPermission after it has found that controller level access permissions do not allow access to the requested function. The requester receives a response indicating that access was denied, but the actual function is executed regardless of that. | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-06T12:21:02.066Z
Reserved: 2026-06-08T00:00:00.000Z
Link: CVE-2026-52466
Vulnrichment
Updated: 2026-08-06T12:20:36.904Z
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-06T00:30:03Z