CVE-2026-18723: diaowen DWSurvey Survey Status up-survey-status.do improper authorization
A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18723?
CVE-2026-18723 has a medium severity score of 6.3.
How do I fix CVE-2026-18723?
To address CVE-2026-18723, update Diaowen DWSurvey to the latest version that resolves this improper authorization issue.
What type of attack can exploit CVE-2026-18723?
CVE-2026-18723 can be exploited through remote attacks due to improper authorization in the Survey Status Handler.
What component is affected by CVE-2026-18723?
CVE-2026-18723 affects the Survey Status Handler of the Diaowen DWSurvey application.
Which versions of Diaowen DWSurvey are vulnerable to CVE-2026-18723?
Diaowen DWSurvey versions up to 6.14.0 are vulnerable to CVE-2026-18723.