CVE-2026-16646: PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

Published Aug 25, 2026

Updated

Vulnerability in Drupal PanKM. This issue affects PanKM versions: ..

Affected Software

1 affected component

PanKM=

Event History

Aug 25, 2026

CVE Published

via MITRE·10:22 PM

Data Sourced

via MITRE·10:22 PM

Description

Data Sourced

via NVD·11:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Can an unauthenticated attacker exploit this remotely?

The CVSS vector indicates that exploitation is network-based but requires high privileges. It is therefore not rated as exploitable by an unauthenticated attacker.

Does successful exploitation require action from another user?

Yes. The CVSS vector includes user interaction required, so an attacker must induce a user to take an action as part of exploitation.

What is the expected impact of a successful exploit?

Successful exploitation is rated as having high confidentiality and high integrity impact. No availability impact is indicated.

Is exploitation expected to be straightforward once an attacker has access?

No. The attack complexity is rated high, indicating additional conditions beyond network access, privileges, and user interaction are required.

CVE-2026-16646: PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

Affected Software

Event History

Frequently Asked Questions

Can an unauthenticated attacker exploit this remotely?

Does successful exploitation require action from another user?

What is the expected impact of a successful exploit?

Is exploitation expected to be straightforward once an attacker has access?

Company

Resources

Contact

Frequently Asked Questions

Can an unauthenticated attacker exploit this remotely?

Does successful exploitation require action from another user?

What is the expected impact of a successful exploit?

Is exploitation expected to be straightforward once an attacker has access?