CVE-2026-116384: Bdtask Garage 24 Garage Management Software Backend improper authorization
A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access to the affected Backend and low-privileged access, as indicated by the PR:L metric. No user interaction is required.
What impact could successful exploitation have?
The vulnerability can result in improper authorization and has low potential impact on confidentiality, integrity, and availability. The described issue affects unknown Backend code.
Is public exploit information available?
Yes. The exploit has been made publicly available, increasing the likelihood that it could be used in attacks.
Is a vendor response or fix identified?
No vendor response is reported. The available data identifies the affected software version as 1.0 but does not provide a patch or mitigation.