medium4.3
CVE-2026-97072
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: …
Impact
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
An attacker can exploit this over the network, with a regular user account, without any action by a user. If it succeeds: low risk of data or systems being changed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| myCred | myCred | through 4.0.2 |
| Saad Iqbal | myCred | Version 0 ≤4.0.2 |