CVE-2026-16307: IDOR in Netiket Information Technologies' EdoWEB
Published Oct 27, 2026
·Updated
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects EdoWEB: before 780-g7.
Affected Software
1 affected component
Netiket Information Technologies EdoWEB<780-g7
Event History
Oct 27, 2026
CVE Published
via MITRE·01:23 PM
Data Sourced
via MITRE·01:23 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation is possible over the network, requires low attack complexity, and requires low privileges. No user interaction is required.
2
What access could an attacker gain?
The issue allows access to functionality that is not properly constrained by access-control lists. The reported impact is limited confidentiality impact, with no reported integrity or availability impact.
3
Which EdoWEB versions are affected?
EdoWEB versions before 780-g7 are affected. The provided information does not state whether 780-g7 or later has been fixed.