Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 42 MIN AGO
T-42M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-31936
Combodo iTop: Unauthorized access to object information via search operation
High
PUBLISHED
CNA: GitHub_M
Base score
8.8
CVSS v3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
View raw JSON
CVE Program record
02
Description
CNA: GitHub_M
Combodo iTop: Unauthorized access to object information via search operation
03
Metadata
SCHEMA: 5.2
Published
2026-08-21 21:17Z
4 HR AGO
Last updated
2026-08-21 21:17Z
4 HR AGO
Reserved
2026-03-10
Assigning CNA
GitHub_M
Record state
PUBLISHED
Severity
High (CVSS 8.8)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862
Missing Authorization
Class
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
f2a6c6ca177213272203b1fbb7c8d6933628ec729f770f64eaa1e89470dfcf19
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Combodo
iTop
< 3.2.3
—
05
References
REFS: 2
github.com
https://github.com/Combodo/iTop/security/advisories/GHSA-3r3r-j29m-3v43
x_refsource_CONFIRM
github.com
https://github.com/Combodo/iTop/commit/b3223eb9b6bc1514276f8f321db1e27db6f42808
x_refsource_MISC