CVE-2026-14792

Katalog CVE

CVSS 6.5 · Medium EPSS 0,63%

Kerentanan Incorrect Privilege Assignment. Skor CVSS 3.1 6.5 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. Upgrading to version 5.1.0-rc.1 will fix this issue. The identifier of the patch is af6023b5ac3b030ffcea24fac799f76f3e3512c6. You should upgrade the affected component.

Rincian

Terbit di NVD

6 Juli 2026

Terakhir diubah

7 Juli 2026

Status NVD

Deferred

CVSS 3.1

6.5 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/formbricks/formbricks/
• https://github.com/formbricks/formbricks/commit/af6023b5ac3b030ffcea24fac799f76f3e3512c6
• https://github.com/formbricks/formbricks/pull/8094
• https://github.com/formbricks/formbricks/releases/tag/5.1.0-rc.1
• https://vuldb.com/cve/CVE-2026-14792
• https://vuldb.com/submit/850791
• https://vuldb.com/vuln/376386
• https://vuldb.com/vuln/376386/cti